last executing test programs: 14m9.222568479s ago: executing program 1 (id=168): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x4}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000889000/0x2000)=nil, 0x2000}, 0x1}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xfffffffffffffffd, &(0x7f0000002480)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000340)='./file0\x00', 0x8100, &(0x7f00000000c0)={0x100005, 0x100062, 0x60000, {r1}}, 0x20) (async) fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x1c) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7ff, 0x20, 0xabbf}, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000480)=0x7fffffff, 0x4) (async) socket$netlink(0x10, 0x3, 0xf) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) (async) read$FUSE(r1, &(0x7f0000004500)={0x2020}, 0xfffffffffffffea9) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={0x0}) (async) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x57062c82, 0x42) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x2, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000400)={0x9, r8, r7, 0xabababab}) (async) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r9, r9, 0x0, 0x200000) cachestat(r1, &(0x7f0000000000)={0xc, 0x6}, &(0x7f0000000280), 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x2436b, 0x1, 0x7ffd, 0x2ce, 0x0, r5}, &(0x7f0000000240), &(0x7f0000000040)) 14m9.090960729s ago: executing program 1 (id=170): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x003\x00\x00\x00\x00'], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001480)={0x1c, &(0x7f0000000fc0)={0x20, 0x15}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000440)={0x40, 0xf}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x20050800) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001080)={0x34, &(0x7f0000000dc0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m6.002828188s ago: executing program 1 (id=181): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = getpgrp(0x0) move_pages(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x90000, 0x1], &(0x7f0000000000), 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x5409, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r4 = syz_io_uring_setup(0x5caf, &(0x7f00000000c0)={0x0, 0xc439, 0x2, 0x40000006, 0xe2}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x3406}, 0x1}) io_uring_enter(r4, 0x47f6, 0x1000, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x0, 0x1, 0x9e, 0x8, {{0x1b, 0x4, 0x0, 0x4, 0x6c, 0x68, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x34}, {[@cipso={0x86, 0xd, 0x0, [{0x1, 0x7, "580e2362ff"}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x1b, [@remote, @private=0xa010101]}, @generic={0x83, 0xf, "ae3fad0531575bf65a7d58349c"}, @noop, @noop, @rr={0x7, 0x7, 0x80, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x24, 0x47, 0x0, 0x0, [0x7, 0x4, 0x100, 0xaf, 0x81, 0x1, 0x0, 0x800]}]}}}}}) sendmsg$xdp(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x2c, 0x0, r7, 0x7}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="6c07350e1ce2c07c721660ca260de7e3083e3c19aee4737d9daf5c71cbc07a23119589b1d9819b83a428b96dc1cbf78eddd5d945b5957309003cb97931c62de6dcc52dfc823fe4e01fa337bddfc4cf885a4b20f85043bf60db591969b46e233ceb302a27eae76c8faa74e71c75b4ee760ed3433e859dfbeabc4dd95678050869a7fa4fd8476b4df5bcdf54e62acc0628f3a15a0a4eda80e8b9ec5848a9d041bd23ecc5254d908c36c36d0037dcfb4f06491833af53", 0xb5}, {&(0x7f0000000200)="a9ba1d596ecc593fa760d1d2c363eeb6b8ad6ac156f1aae1b5abd9aee2a7b69b69d3fd421faaa43873ed0af48b4740ed4d50e2b70b91a188cd0b58ff108434b8b122b1b6f559f7186cfd3aa397aa2161c41d7ca5043a078f4624cccaa0", 0x5d}, {&(0x7f0000000340)="53c38114d202d561178d7f399f3cdb72bf499672ebb133d3fce2692489b0869dd0623c1d160838cf0703b6e3dfb03223bb18f38c5f832a46cdd52be76ecc30d78b25aa81933a05f595d4c807eb5f27601a6ab3fd3c304769155166721a7c740d970dc1f82b36b69028b0ec4545b00662d650657a0813f14c7c876d5db2ae1a30ad3c88b85441d411a28ca34a0452d1bb822d2b6a6baeffad72b37935e3fef79f214d1ccc0da3eb521c65734b311f67a82d677e9e97d8249a1aa75fefddb1bbfdd91bacbe035f5203f72003d6b3f714fda09d3a4c5dc199", 0xd7}], 0x3, 0x0, 0x0, 0x1}, 0x4000004) 14m3.724412821s ago: executing program 1 (id=186): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x80}}) io_uring_enter(r4, 0x47ba, 0xa25d, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r8, r8, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 13m54.512637017s ago: executing program 1 (id=210): socket$unix(0x1, 0x1, 0x0) unshare(0x6a040000) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x182801, 0x84) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000001c0)={0x0, 0xb700, "9e00829f52fa58b281ad0734a9471cf589797953bc12d79a", {0x3, 0xfffffffc}}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x40400) (async) unshare(0x40400) connect$pppl2tp(r1, 0x0, 0x0) (async) connect$pppl2tp(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 13m54.240183693s ago: executing program 1 (id=211): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x6, 0x8) recvmmsg(r1, &(0x7f0000000200)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/164, 0xa4}, {&(0x7f0000000280)=""/130, 0x82}], 0x2, &(0x7f0000000340)=""/120, 0x78}}], 0x1, 0x10003, &(0x7f00000003c0)={0x0, 0x3938700}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x1, 0xb51b, 0x654, 0xfffff04b, 0x0, 0x8}) prctl$PR_CAPBSET_DROP(0x18, 0x11) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000440)={0x8, 0x5d}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001c000000000005000b"], 0x3c}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="2012050000400501bd2678"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 13m53.524987048s ago: executing program 32 (id=211): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) r1 = socket$inet6(0xa, 0x6, 0x8) recvmmsg(r1, &(0x7f0000000200)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/164, 0xa4}, {&(0x7f0000000280)=""/130, 0x82}], 0x2, &(0x7f0000000340)=""/120, 0x78}}], 0x1, 0x10003, &(0x7f00000003c0)={0x0, 0x3938700}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x1, 0xb51b, 0x654, 0xfffff04b, 0x0, 0x8}) prctl$PR_CAPBSET_DROP(0x18, 0x11) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000440)={0x8, 0x5d}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001c000000000005000b"], 0x3c}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="2012050000400501bd2678"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 10m44.433039947s ago: executing program 0 (id=904): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) syz_clone3(&(0x7f0000000400)={0x180000000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x3c}, &(0x7f0000000240)=""/185, 0xb9, &(0x7f0000000300)=""/233, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) sched_getparam(r2, &(0x7f00000001c0)) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) (async) syz_clone3(&(0x7f0000000400)={0x180000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3c}, &(0x7f0000000240)=""/185, 0xb9, &(0x7f0000000300)=""/233, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) (async) sched_getparam(r2, &(0x7f00000001c0)) (async) 10m44.045082111s ago: executing program 0 (id=905): syz_io_uring_setup(0x6e05, &(0x7f0000000300)={0x0, 0xc0ef, 0x8, 0x0, 0x375}, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x121, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40204, 0x100039}, &(0x7f0000000340)=0x0, &(0x7f0000000f80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x9, 0x1, 0xffffffffffffffff, 0x0}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101402, 0xb9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x297}]}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x31f3e8b0403b7437, 0x0, r3, &(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x40, 0x6100}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) close(r7) r8 = io_uring_setup(0x7a5c, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) 10m43.610015863s ago: executing program 0 (id=906): timerfd_create(0x7, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) io_setup(0x8, &(0x7f0000000600)=0x0) (rerun: 64) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x800) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000400000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) (async) r5 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (rerun: 32) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) (async) r7 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100, 0x0, 0x145}, &(0x7f0000000300)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) 10m43.314145005s ago: executing program 0 (id=909): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) fcntl$lock(r2, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r2, 0x7, &(0x7f0000000180)={0x2, 0x0, 0x2, 0xdbd}) syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @random="a1b855c18be6", @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x2, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x7, 0xc1, [@multicast1]}, @ssrr={0x89, 0x3, 0x21}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0xa5f2, 0x195, 0x89aa, 0x3, 0x64}}}}}, 0x0) 10m43.204168688s ago: executing program 0 (id=911): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/64, 0x40}], 0x1, 0x0, 0xfffffffffffffd78}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffb}, 0x50) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_io_uring_setup(0x8ae, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r4, 0x32d7, 0xffffffff, 0x5, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGVERSION(r7, 0x80044801, &(0x7f0000000000)) ioctl$HIDIOCGUSAGES(r7, 0xd01c4813, &(0x7f0000000980)={{0x2, 0x200, 0x7, 0x5, 0x3ff}, 0x12c, [0xfffffffb, 0x1, 0xed, 0xad38, 0x0, 0x1e, 0x41eb, 0x4, 0x6, 0xa, 0x3, 0x37708, 0x7, 0x8000, 0x401, 0x6, 0x7, 0x401, 0x7, 0x9, 0x800, 0x4, 0x8, 0x8, 0x7fffffff, 0x8, 0xad, 0x21, 0x6, 0x400, 0x400, 0x0, 0x9, 0x0, 0x5, 0xdf1b1e73, 0x1ff, 0x3ff, 0x6, 0xfffffff2, 0x0, 0x6a9, 0x0, 0xe, 0x9, 0x8, 0x8001, 0x5, 0x7, 0x3, 0x6, 0xfffffffa, 0x1ff, 0x3, 0xf7b, 0x1, 0x5, 0x4, 0xe4, 0x1, 0xfffffff9, 0x40, 0x0, 0x7, 0x3, 0xc, 0xd1, 0x6, 0xfffffff8, 0x1, 0x7, 0x1ff, 0xdb3, 0xffff8000, 0xd, 0x6, 0x5, 0x40, 0x9, 0x7fff, 0x200, 0x4, 0x3, 0x1, 0xf7, 0x400, 0x7, 0xffffffff, 0x0, 0x7, 0x2, 0x3, 0x7, 0x6, 0x7, 0xfffffffa, 0x8, 0x9, 0x1, 0x6, 0x559a, 0xfffffffe, 0x96e4, 0x81, 0xf8f, 0x9, 0x6, 0x0, 0x3, 0x7, 0x3, 0x4, 0x2, 0x7c, 0x4, 0xa84, 0x8, 0x3, 0xd1b, 0xffffff00, 0xfffffffb, 0x3cb6addd, 0xa461, 0xffffef51, 0x4, 0x7ff, 0x7, 0x4, 0x7, 0x2, 0x1, 0x0, 0x6, 0x5, 0x401, 0x0, 0xffff9f6a, 0x0, 0x0, 0x7f, 0x2, 0x8b, 0x0, 0x4, 0x3, 0x9, 0x7, 0x6, 0x8, 0x9, 0x8000, 0x1, 0x8, 0x5, 0x3, 0x3, 0x5, 0xfffffffc, 0x40, 0x6fb, 0x8f, 0x20f, 0x3, 0x8, 0x5, 0xd3b53fc6, 0xffffffff, 0x9, 0xe, 0x7, 0x5, 0xfffffffc, 0x52e, 0x8001, 0x40, 0x6, 0x9, 0x10000, 0x3, 0xec, 0x101, 0xa, 0x8, 0x3, 0x6, 0x0, 0x0, 0x9, 0x4, 0x6, 0x100, 0x2, 0x101, 0xf, 0x9, 0xc, 0x8, 0x4d0, 0x316, 0x4, 0x4, 0x7ff, 0x9, 0x5, 0x2, 0xae46, 0x2, 0x2, 0x100, 0xfffffbdb, 0x33b, 0x0, 0x0, 0x2, 0x6, 0xe, 0x5, 0xf, 0x2, 0x401, 0x7, 0x6, 0x2, 0x10001, 0xfffff28b, 0xefb, 0x2a, 0x18000000, 0x9, 0x6, 0x8ac, 0x0, 0x539, 0x200, 0x8, 0x0, 0x7, 0x7, 0x8, 0x40, 0x101, 0xb, 0xeb9b7879, 0xfffffffe, 0x6, 0x8000, 0x0, 0x6, 0xc, 0x1ff, 0x9, 0x7ff, 0x0, 0x3, 0x4, 0x3, 0x7fffffff, 0x7d9f, 0x1, 0x4, 0x666d20c6, 0x8, 0xfffffffd, 0xb4d, 0x800, 0xd1, 0x5, 0x0, 0x8, 0xff, 0x11, 0xdd7, 0x9, 0x0, 0x300000, 0x4, 0x1, 0x8, 0x9f, 0x2, 0x9, 0x10000, 0x1ff, 0x9ad7, 0x48, 0xc, 0x5, 0x2, 0x1, 0xfff, 0x75b, 0x100, 0x2, 0x10, 0x1, 0x4, 0xff, 0x2, 0x1, 0x6, 0x4, 0x9, 0x3, 0xfffffff8, 0xfe, 0x0, 0xa, 0xdc4, 0xca22, 0x9, 0x6, 0x5, 0x3, 0x3, 0x80000001, 0xfffffff8, 0x0, 0x6, 0xa, 0x10001, 0x1, 0x2, 0x401, 0x7fff, 0x908, 0x3, 0x9, 0x0, 0x3, 0x0, 0xffff, 0x4, 0x7fff, 0x3, 0xfffffff8, 0x41bb, 0x4, 0x3, 0x8, 0x3, 0x3, 0x6, 0xe, 0x9, 0x7, 0x8000, 0x4, 0x1642, 0x7, 0x96c, 0x10, 0x80000000, 0x6, 0x8000, 0xffff, 0x5, 0x75, 0x4, 0x9806, 0x0, 0x159, 0xf6, 0x4, 0x8, 0x4, 0x2a7, 0x216, 0x7fff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1000, 0x4, 0x2, 0x8, 0xffffffc0, 0x2, 0x6, 0x7ff, 0x4, 0xffffff1e, 0x0, 0xba, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x7, 0x1000, 0xc8, 0x3800000, 0x10000000, 0xfff, 0x9, 0x6, 0x7, 0x5, 0x4, 0x1, 0x4, 0x2, 0x5, 0x1, 0x3, 0x3e9, 0x1, 0x4, 0x6, 0x1, 0x22, 0x5, 0xfffffffd, 0x9, 0x0, 0x3, 0x8, 0x7, 0x7, 0x7, 0x9, 0x6, 0x1, 0x7, 0x7, 0x1000, 0x5e88535a, 0x3, 0x5, 0x3, 0xffff, 0x4, 0x5, 0xb, 0xffbb, 0x6, 0x0, 0x2, 0xfffffffc, 0x32, 0x80000000, 0xc, 0x1000, 0xbd39, 0x101, 0x0, 0x6, 0xffffff35, 0x9, 0x0, 0xb, 0x800000, 0x8, 0x5, 0x7fff, 0x64, 0x0, 0x101, 0x89, 0x40, 0x7, 0x1, 0x0, 0xffffffda, 0x2, 0x401, 0x8, 0x1000, 0x6, 0x10000, 0xfb, 0x800, 0x4, 0x4, 0x8, 0x4c, 0xc82, 0x2, 0x0, 0x5, 0x2, 0x0, 0x2, 0xd3, 0x1, 0x1d, 0x67f, 0x0, 0x8, 0x5, 0x1, 0x5, 0x9, 0x1, 0x6, 0x1, 0xb, 0x80000000, 0x1, 0x0, 0x400, 0xc, 0x3ff, 0x1, 0x80000001, 0x2, 0x3, 0x1, 0x10000000, 0x8, 0x0, 0x7fffffff, 0x7, 0xa207, 0x1, 0x5, 0x200, 0x3, 0xa, 0xc, 0xfffffff7, 0x5, 0x7ff, 0x162, 0x88, 0x80000, 0x4, 0x6, 0xb, 0x3, 0xb, 0x13, 0x2, 0x8000, 0x4eb38000, 0x897b, 0x8, 0x0, 0x9, 0x2, 0x7, 0x727c6747, 0x66d5, 0x4, 0x6ef, 0x8, 0x7, 0x0, 0x8000, 0xf, 0xf8, 0x6, 0x10, 0x6, 0xfffffff9, 0xfffffff8, 0x9, 0xa979, 0x3, 0x5, 0xdcdce5c, 0x0, 0x5, 0x6, 0x9, 0x8, 0xfffffff7, 0xfffffffa, 0x6ff, 0x0, 0x400, 0x3, 0x9, 0x5, 0x3f9, 0x9, 0x6, 0xf2b4, 0x0, 0x4, 0x8, 0x2, 0x1, 0xe3f8, 0x10000, 0x2, 0xfffffef5, 0xffff8000, 0x4, 0x3, 0x2, 0x7, 0x0, 0xc0000, 0x9, 0x0, 0x3, 0xfff, 0x3, 0x7, 0x3, 0x3, 0x2, 0x5, 0xfffffff8, 0x7ff, 0x9, 0x0, 0xb46, 0x5, 0x8, 0x7fff, 0xfffffffe, 0x8, 0x1, 0x8, 0x3, 0x0, 0x100, 0x1, 0x7, 0x2, 0xaf, 0x7fffffff, 0x8, 0x0, 0x1, 0x5, 0x6, 0x6, 0x5, 0x3ff, 0x800, 0x1, 0x400, 0x2, 0xef53, 0x4, 0x8, 0x0, 0xfffffff9, 0x800, 0x1ff, 0x5, 0x0, 0x9, 0xc, 0xffff8000, 0x2, 0x7, 0x9, 0xb, 0xcff1, 0x6, 0x213b, 0x9, 0x8f6, 0x1000, 0x6, 0x7f, 0x400, 0x3, 0x100, 0x9, 0x6, 0x5, 0x7, 0xffffff80, 0x6a0, 0x8, 0x0, 0x2911, 0x40, 0x1, 0x7, 0x2, 0x3, 0x4, 0x4, 0x1, 0x6, 0x7f, 0x7, 0x800, 0x9, 0x5f, 0x9, 0x3, 0xd, 0x3, 0x4000000, 0x9, 0x3, 0xac78, 0x7, 0x80000000, 0x8, 0x1, 0x4, 0x5, 0xc53d, 0x5e5, 0xfffffff1, 0x6, 0x50000000, 0x5, 0x10001, 0x9, 0x9, 0x6, 0xffffffea, 0x7ff, 0x35a, 0x101, 0xe, 0xc7, 0x8, 0x25, 0x7fffffff, 0x5, 0x0, 0x0, 0xeffe51e, 0x0, 0x0, 0x3, 0x10000, 0x4af6, 0x1ff, 0x100, 0x3, 0x8, 0xfffffa24, 0x4, 0x0, 0x100, 0x0, 0x3, 0x0, 0x2, 0x40, 0x1, 0x7, 0x5829, 0x0, 0x4, 0x8, 0x4, 0x6, 0x4, 0x10001, 0xca, 0x0, 0x9, 0x3, 0x7fff, 0x1, 0xc20, 0x5c, 0x5, 0x8, 0x300, 0x800, 0x2, 0x3ff, 0x4, 0x101, 0x81, 0x5, 0x2, 0x99, 0x8, 0x0, 0xba, 0x4, 0x572a9a2e, 0x8, 0xc01, 0x3, 0xfffffff1, 0x0, 0x80, 0x1, 0x2, 0x7, 0xfffffffd, 0x6, 0xc, 0x9, 0x6, 0x1, 0x1, 0x7fff, 0x6, 0x0, 0x0, 0x7, 0x1, 0x0, 0x5a, 0x6, 0x9, 0xd, 0x8, 0x9, 0x2, 0x8, 0x6, 0x4, 0x9, 0x1, 0x5, 0x6, 0x3, 0x6, 0x80000001, 0x9, 0x5, 0x8, 0x2, 0x3, 0xf, 0x7ff, 0xbda2, 0x80, 0x7, 0xa41, 0x4f, 0x2, 0x4, 0x2, 0xb9, 0xfa, 0x7, 0xb, 0x800, 0x101, 0x8, 0x17, 0xfffffffd, 0x7fff, 0x16f, 0xed, 0x6, 0x63, 0x7, 0x56, 0x7, 0xd3, 0xb, 0x6, 0x1, 0x5, 0x6, 0x7, 0x10000, 0x9, 0x5, 0x7, 0xfffffff8, 0x2bae, 0x80000001, 0x4, 0x3, 0x1, 0xffffffff, 0xdf, 0x8001, 0x8, 0x2, 0x8, 0x6, 0x7, 0x1000, 0xa, 0x3, 0x7, 0x6, 0xd0bd, 0x80000000, 0x5, 0x400, 0x45b, 0x5, 0xc802, 0x876, 0x89, 0x2, 0x4f1, 0x401, 0xfffffff7, 0x3, 0x8, 0x2, 0x3, 0xd5, 0x46, 0x7, 0x1ff, 0x80000000, 0x88, 0x10f, 0xff, 0xfff, 0xcc6, 0x5, 0xa000, 0x9, 0x7, 0x80000001, 0xe, 0xdd, 0x6, 0x10, 0xa4, 0x5, 0x1, 0x5, 0x10001, 0x6, 0x3, 0x7fffffff, 0x0, 0x5, 0xfffffffe, 0x3, 0x4, 0x9, 0x7, 0x8, 0xdd, 0x7fff, 0x8001, 0xc, 0x5, 0x3, 0x2, 0x3, 0x0, 0x5, 0x8, 0xcc6, 0x7f, 0x9, 0x9, 0x0, 0x2, 0x9, 0xa, 0x4, 0x3ff, 0x8, 0x800, 0x347300, 0x1000, 0x72, 0x0, 0x1, 0x7f, 0x0, 0x2, 0x101, 0x303fdf3a, 0x7, 0x4, 0x1, 0x100, 0x0, 0x80000000, 0x1800000, 0x6, 0x8, 0x2, 0x7, 0x3, 0x7, 0x7fffffff, 0x6, 0x6, 0x1, 0x9, 0x3, 0x1, 0x7f, 0x80000000, 0xfbf, 0x86f2, 0x0, 0x668f, 0x7fffffff, 0x1, 0x1, 0x730e, 0x8, 0x2, 0x2, 0x7ff, 0x9, 0x1, 0x80000001, 0x40, 0x9c7, 0x0, 0x7ff, 0x9, 0x0, 0x8, 0x8, 0x400, 0x6, 0x0, 0x6, 0x1, 0x3250, 0xffff, 0x94c, 0x4, 0x5, 0x5, 0x6]}) ioctl$HIDIOCINITREPORT(r7, 0x4805, 0x0) ioctl$HIDIOCGUSAGES(r7, 0xd01c4813, 0x0) 10m42.244711751s ago: executing program 0 (id=915): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18}, @typed={0x4, 0x19}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x20040010) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, &(0x7f0000000640), 0x0, 0x10, 0x40ab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023892) syz_genetlink_get_family_id$batadv(0x0, r0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(r8, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) fsmount(0xffffffffffffffff, 0x0, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r9, r9, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 10m41.586010713s ago: executing program 33 (id=915): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18}, @typed={0x4, 0x19}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x20040010) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, &(0x7f0000000640), 0x0, 0x10, 0x40ab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023892) syz_genetlink_get_family_id$batadv(0x0, r0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(r8, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) fsmount(0xffffffffffffffff, 0x0, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r9, r9, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 7m36.777913841s ago: executing program 4 (id=1596): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x18, 0x0, 0x6d, "dcb9e7f3", "8173828d"}}, 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000000)={{0x12, 0x1, 0x140, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0xd, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x4}, [@extension_unit={0x8, 0x24, 0x8, 0x5, 0xb, 0x2, 'G'}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x2, 0x5, 0xc4}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0x3, "a24f9e0684"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x2, 0xf8, 0x5, "19", "bc5d"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf, 0x4, 0x9, 0x81, "2d92da", "03"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x4a, 0x4, {0x7, 0x25, 0x1, 0x82, 0x3, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x2, 0x2, 0x10, "875ca5217d87c339f0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7f, 0xc4, 0x0, {0x7, 0x25, 0x1, 0x2, 0xac, 0x4}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xf1, 0x0, 0x4f, 0x8, 0x61}, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x7, 0x65}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x8}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x402}}, {0x11, &(0x7f00000001c0)=@string={0x11, 0x3, "14182e38c6893e697c414b273b409c"}}, {0xb9, &(0x7f0000000200)=@string={0xb9, 0x3, "b285938941e6a8d1a82a4180ee7dde07bec085e5e3c35f38533e720c3c2d81c7fb40125d9cb673274c0fc2a0de2fd48f30dca4c205f8736309f4d212402bccb79edfa175225f9c6ebd329706618b508971c32771af39022a8751bdf20e66a90ebe9d01e3dfbeadac95535b349768cbc0322b04f000684a1c19096d40d6efd2d7532c4a005e90e6bd619812a8c5448e70647f5260cec181a828b1be539e560cbb0991dc7b6376be978beb2059b6bb6067710d2982e6f41e"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc07}}]}) 7m34.878106751s ago: executing program 4 (id=1605): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x15, 0xc, 0x0, {0x9, 0x1000, 0x101c, 0x2010, 0x4, 0x401, 0x100, 0xa, 0x0, 0x64ee, 0x3e, 0x7e9, 0x7, 0x9aa5, "a0db1b78f933b5947401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xebd53000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x240, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_adjtime(0x2, 0x0) 7m31.885574248s ago: executing program 4 (id=1618): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000000246856e307ad68be0000080001"], 0x20}}, 0x4000000) io_setup(0x80, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000580)=ANY=[@ANYBLOB="b08d00000100000081"]) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000580)=ANY=[@ANYBLOB="b08d00000100000081"]) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x33b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0xf7, 0x2, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x0, 0x57, 0x1, {0x22, 0xb69}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x5, 0xff}}}}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x5, 0x0, 0x5, 0x4000}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) (async) syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) (async) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r5, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) (async) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) ioctl$int_in(r3, 0x40000000af01, 0x0) (async) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000540)) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) syz_usb_control_io$hid(r2, &(0x7f0000000980)={0x24, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x147e, &(0x7f0000000080)={0x0, 0x101096, 0x4000, 0x400002, 0x80403ae}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20040000}) syz_usb_control_io$hid(r2, &(0x7f0000002580)={0x24, 0x0, &(0x7f00000024c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}, 0x0, 0x0}, 0x0) 7m30.230785987s ago: executing program 4 (id=1624): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x881, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) (async) setxattr$incfs_id(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) (async) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 7m29.641599972s ago: executing program 4 (id=1625): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x20010, r1, 0xe8982000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x640000) syz_usb_disconnect(r5) (async) syz_usb_connect(0x0, 0x6b, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000d4defa088f8c073b9052ce3c9baa0c740021529e25690102030109025900010c0000000904bf020500021e224ee5e3a9957478382c7de9750000000071bc5afffb44c349c9b23dd407250180b4260309058000ff0af0ce6dac408a0300"/107], 0x0) (async) ioctl$EVIOCGBITSW(r5, 0x80085502, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd26, 0x4000, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20008004}, 0x80) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000840)={"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"}) (async) ioctl$KVM_GET_LAPIC(r9, 0x8400ae8e, &(0x7f0000000c40)) (async) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000bfd000/0x400000)=nil) r12 = syz_kvm_add_vcpu$x86(r11, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000093, 0x7}}], 0x20}) ioctl$KVM_SET_CPUID2(r12, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x10000, 0x80}]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020028bd7000fddbdf251c0000000c0099000e0051c5d8c1e396"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x808d9) (async) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x5, @local, 0xe}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000240)="ad819409baee53d05515d358a8f4ab3b80c09f5129a0169b39aa96ca18f70d8cacb45d34faf183bf57039d6d4153be102d1222448b365b4bffaff349f39b2f4c79886d1525b0174fe0836d02dea52dd95b88a4fc5faa956281d18c9cec2933d0925a53aec3b15ce7a2af6ec8a2e8208a8af7cde3575ec8a0d347f261e87cca81525e83697cdd72b457ac0884f74ccd77ac69d6f13af4e047f066ebf910a7bb9f98a33d6fd139792383ebbe", 0xab}, {&(0x7f0000000300)="9632ae4f5dc8f6d9783d9adf1e119a0f89c4e82e", 0x14}, {&(0x7f0000000340)="77b543ba0e3bf6de54466cbdfc67b4310c320fa6220eb613aea0d48de9017c2741b73b69c4cd2d8f20cd50346775fa6d4dea795b3ff7d7cf70edaf7608c065807511e41564a5f97c2c", 0x49}, {&(0x7f00000003c0)="5a1639eff35c9a1d83becf4471765101243b532c2386605385f241e0cb51e1c13ecc28571a3f42ece972c4e67b60ea82209e065d3d344b4fe2e87c9f8e20cdbbc0513a41ea07ca90ac53b6034d2ee10747cf672836462fcc21f8ed0414bfa29560614f4f6b2ea0cd41950bef6348eedaee28de09dabbe3af597a4aae1729cc82be7e8021bb020791b4ba5a83fcd9d99171c51b9d62f1c32d3e8f24", 0x9b}, {&(0x7f0000000480)="342c6f7d608d9f00dfb160895bf8d61833224e69d05f23", 0x17}, {&(0x7f00000004c0)="7aedd5c32c3cc97f55b7bf45fd0161bdae904341d6387ad3a33a8357e48c828aefe188fed123b7c28c728acfa52f51166479769f20d9bd78443b20b721f13713c5264b615abadec4e3fbb95239989bd788ea84ffcdf286ed7ef1c43280d9e782a19b2b2c821260be4a0b68ffcb810b3e2eaaab1eae3c91c6a039ed7bbef42aa1ec75b03cb2f18a375372e185fa141f3a63c18c683d39cd4f4fca0c2895ba5cdf6405fcabaf89afa2a699f9083fd27fd963ec11e511a16b57f3945c40d32b85a36aafd75fad737601fc32b3156525ba93a2a3", 0xd2}], 0x6, &(0x7f0000000680)=[@tclass={{0x14, 0x29, 0x43, 0x1}}], 0x18}}], 0x1, 0x40004) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0xffe4, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) 7m28.760250024s ago: executing program 4 (id=1627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000040) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x40010) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000150a01000000000000000000000000040900020073797a32000000000900010073797a3000000000f300034000000002"], 0x34}, 0x1, 0x0, 0x0, 0x80855}, 0x4) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2400, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xf8, 0x100, 0x48, @mcast2, @mcast2, 0xf800, 0x80, 0xc8, 0x5}}) getpeername$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000500)={@private1, 0x0}, &(0x7f0000000540)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x9c, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfd}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x9c}}, 0x44040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) read(r8, &(0x7f00000002c0)=""/22, 0x16) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x8000) syz_usb_disconnect(r2) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x193) r12 = fsopen(&(0x7f00000003c0)='ocfs2\x00', 0x1) close_range(r12, 0xffffffffffffffff, 0x0) 7m28.03338415s ago: executing program 34 (id=1627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000040) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x40010) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000150a01000000000000000000000000040900020073797a32000000000900010073797a3000000000f300034000000002"], 0x34}, 0x1, 0x0, 0x0, 0x80855}, 0x4) r7 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2400, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0xf8, 0x100, 0x48, @mcast2, @mcast2, 0xf800, 0x80, 0xc8, 0x5}}) getpeername$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000500)={@private1, 0x0}, &(0x7f0000000540)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x9c, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfd}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x9c}}, 0x44040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) read(r8, &(0x7f00000002c0)=""/22, 0x16) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x8000) syz_usb_disconnect(r2) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x193) r12 = fsopen(&(0x7f00000003c0)='ocfs2\x00', 0x1) close_range(r12, 0xffffffffffffffff, 0x0) 13.650192261s ago: executing program 7 (id=3175): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0xfff, 0x44000) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f00000004c0), 0x6, 0x0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000000c0)=[{}, {}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x2, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x59565955, 0x8, 0xa, [{0xd, 0x3}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x5, 0xff, 0x6, 0x1, 0x5}}, 0x92}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x1c, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xf0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv4_newaddr={0x28, 0x14, 0x503, 0x70bd2f, 0x25dfdbfd, {0x2, 0x0, 0xd3, 0xff, r10}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) recvmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002840)=""/19, 0x13}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) 11.12117492s ago: executing program 7 (id=3179): syz_usb_connect(0x3, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 8.264977561s ago: executing program 2 (id=3192): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@allocspi={0x200, 0x16, 0x629, 0x70bd2a, 0x25dfdbff, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x4e22, 0xd64c, 0x4e23, 0x404, 0x2, 0x20, 0x80, 0x73}, {@in6=@remote, 0x4d2, 0x33}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x401, 0xd, 0x2, 0xffff, 0x4, 0x6, 0x0, 0xfffffffffffffffa}, {0x4554, 0x0, 0x5, 0x1000}, {0x5, 0x28, 0x3}, 0x70bd2a, 0x0, 0xa, 0x1, 0xdf, 0x14}, 0x1, 0x6}, [@lifetime_val={0x24, 0x9, {0x3, 0x2, 0x7, 0xc1}}, @sa={0xe4, 0x6, {{@in=@local, @in=@multicast1, 0x4e21, 0x2, 0x4e23, 0x3c, 0xa, 0xa0, 0x0, 0x33}, {@in6=@remote, 0x4d2, 0x3c}, @in=@rand_addr=0x64010100, {0x3, 0x9, 0x5, 0x8, 0xf, 0xbc, 0x1, 0x73}, {0x6, 0x8001, 0xffff, 0xfffffffffffffffb}, {0x6, 0x8, 0x7f}, 0x70bd2c, 0x3506, 0x2, 0x4, 0x3, 0x3}}]}, 0x200}}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000680)={0x8000007, 0xe, 0x1}) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="003102"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="000481"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfc, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x8, 0xa, 0x1, {0x22, 0x502}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0xff, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x4, 0x5, 0xe}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x4, 0x9, 0x5, 0x40, 0x8}, 0x2c, &(0x7f0000000200)={0x5, 0xf, 0x2c, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xa, 0x7, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0xff, 0x400}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x65, 0x95, 0x6, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0xd9, 0x1, 0x0, 0x6a}]}, 0x3, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x813}}, {0xb0, &(0x7f0000000480)=@string={0xb0, 0x3, "319452cfc7df2734431a4b8416d4f8dce8a04d58f2533cb5f2eadcdd7dea46ed4f324e6d46d08ea70ba9927bc7cd4ab17c0aaef420e13974a3e5fa0e567e155503439bfe55a0d659f4ddaddd3f9abf69b791db634fffcc3f19645a5b3cb23fd7df96d440621e4ac94e68fd3bf67fe37d28c457e5ebb84a4ac4ec0c241db95b652264488c82620576376f3328e5446551409642793dff2fae97238a2e44dbe89cb1575f98c86b844d27e362fe760f"}}, {0xe8, &(0x7f0000000540)=@string={0xe8, 0x3, "587c82213bf3aa50887eca41745bdca1a328f718e41aff198cf0a7bfbafb3c2649a1a9fbcd55551d8502e31b053455def10e704a2ce0be091bc6653eb24ff647408f54b263d58a9e3bc976344d966a30f8a4de862c95c68777162becec160f5f66209fb5f039bf6df007404d9f5bf87070d846aee130c846a9b73dfcc8eec722ba61b91d14c44271f2409b523be9335f39caaad685b68e212cc8066a68223a9297b868e8ce0fb1c3e3299f7de50c49efeafd95d49d9287cae8121c9d821fe28fca4588d8f9e730a57ec9541491aa32c243ee9dd537a45c5af09b62a8549a9ef4005419395893"}}]}) 7.916248581s ago: executing program 7 (id=3194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x501100, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, 0x3}) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000040)) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000100)={0x6000, 0x100000, 0x2, 0x0, 0x4}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x13}]}]}, 0x99}}, 0x48880) 7.660955584s ago: executing program 7 (id=3196): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x6, "83c5b03b"}]}}, 0x0}, 0x0) 7.120007926s ago: executing program 3 (id=3198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sendmsg(r1, 0x0, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) (async) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) fsmount(r5, 0x1, 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.071360907s ago: executing program 6 (id=3199): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="a1ab00000000040000003200000008000300", @ANYRES32=r3, @ANYBLOB="20b592dfc46451dddeb7ca111dcb1e6c2a27a5eb317b855a34a1a1b7bab96279a2f5a2a586b96adc61c459efdffea752b9faf0b37433843524497d58c6b03d7296f6d53333ac5ed200a0872ebe09f85378211feb84ff16ad4c847cc1c0d1639bb9fa64e12f651c2a42de860704982a2ae3d776"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 6.971396564s ago: executing program 6 (id=3200): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.411258884s ago: executing program 3 (id=3202): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000020340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5100, 0x0) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff6734", 0xb}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xf}, {&(0x7f0000001100)=""/70, 0x46}], 0x2}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x31, 0xf, "fee509f042a0acf1e551534bea3f6a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.108222985s ago: executing program 2 (id=3203): r0 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{0xe8, 0xf4}, 'port0\x00', 0xe05f3a7b86f66253, 0x40002, 0xfffffff7, 0x5, 0xe7f, 0xa0, 0xa, 0x0, 0x6, 0x4}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/notes', 0x28200, 0x20) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) ioctl$TIOCCONS(r1, 0x541d) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000001c0)=[{{0x2, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x2, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x30) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x4, 0x4, 0x0, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="f2151e4487ae06eff79c50b308bccd1c6394ffd4acf67de640ee74bfa737c3ca5e38051d4207930c5e4700904909d7aaf86c81a24ffdd0e9f7e6ae9bd648ce7726596e136e7700621c79879c83231f6b6d6b3cdf4ec6da50938413670bc2c84324062a61c873e810eb60da8ad5689482f838b5fbbeaae6", 0x77}, {&(0x7f0000000300)}, {&(0x7f0000000340)="51c221a7c9069313ae247a7294f9e31244ac9948e4bc27", 0x17}, {&(0x7f0000000380)="32d92ede2c67d043ee7429f756fb87359dc4d69bb9dfb0ba842698f0e41bdfa3a313e528ae7c2e14657b9bfae8b487789bfc1698661b478e078159aedf8fce5b7477aa23f819166bd9ce6465b49eec6a414fe99d9eff6c9f6a21cbdd01995e8cc5c94ba3b866470b55386a1c49786b5391e4ce230383a46c76f774341a6fd2a3a24c4bcc85b2238fa647424d69f5d2153beceacd60488da92786ef373a5cee329436b60adb3d88f3f79e1909712a397bd6066057d1430cded5198074880854a057e7e4a47a7657f5bb594d208bbd0597f6a4db9a", 0xd4}], 0x4, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7a}}, @mark={{0x14, 0x1, 0x24, 0x401}}], 0x78}, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000580)={0xf707, 0xfff8, 0x7504, 0x2, 0x12, "af8424cd572dc786"}) pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000600)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r6, 0x3b8c, &(0x7f0000000740)={0x30, r7, 0x0, 0x0, 0x1544, 0x5, 0x0, &(0x7f0000000680)=""/176}) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xa, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}, [@ldst={0x3, 0x2, 0x1, 0x4, 0x4, 0xfffffffffffffff0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}]}, &(0x7f0000000800)='syzkaller\x00', 0x9, 0x74, &(0x7f0000000840)=""/116, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0xd, 0x8, 0x8000}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000940)=[r6, r6], &(0x7f0000000980)=[{0x2, 0x5, 0xc, 0x2}, {0x1, 0x4, 0x7, 0xc}, {0x4, 0x4, 0xb, 0x4}, {0x3, 0x2, 0x9, 0x3}, {0x3, 0x3, 0xc, 0x3}, {0x2, 0x5, 0x5, 0x3}, {0x1, 0x1, 0x4, 0x6}], 0x10, 0x70}, 0x94) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000ac0)={'macvlan0\x00', 0xaa8a}) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000b00)) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000b40)) lsetxattr$trusted_overlay_redirect(&(0x7f0000000b80)='./file0/file0\x00', &(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x8, 0x2) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000c40)={@local, 0x1}) sendmsg$NFT_BATCH(r5, &(0x7f00000014c0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x498, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x464, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf36}]}, {0x108, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x91, 0x6, 0x1, 0x0, "471f073fbbf67b02efa9a114f1fec4b4ee7a6ae6b74793cb9448a685028cba0e134dc95bbd59c9fc6fc0e5011530e7f6e946723bbe247b97135d5b8dcfe6bc64d4a56056483f17292b3b95417ab089a039bb8b8e7e3816ecbd6bf05fd06f60a63c478482db56750c68b6566bb5b640d0051473de48ae05930d2fb5faef9e72c431fe42abd27ca8684e4ea42906"}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff7}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}, {0x318, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x228, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "121520f701f2444634942f5032f2bfdb7433fea1bb10e5de4d73aa002b76f5d0e50e4a09719f9f5445bedb333b765425bafec1495710b9744eb57375cfeb9b27256edc9bdc6c90ee78298cc223ae6da0d9f7e124f0eab0c5c550ed3e4e852aa133cff23b6560f3a97d962dba8922e2af3422cade52c8b3e789e3374af39ab676c6050a0b5fdeb4de94abe414162fd75443558f6944508e273da5d6dc05fe44f4cc8af3fc060ff80ee9da8a23ad3dd3dcc7b60105cbf4aba8c2dbfd002087978d025ace0c48700c8519bf92319d0452eea6861f90b8d27320fc"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "600481da5b1ae086b46c863dd66ae00052d31537f7784f967e072ac0583e20fa84012b10323fdc93d4cd73f7b38f367bcb9595077694731d7ad271c8591dbe68fb119f88d8a2fc5c563beae6b8329e82f43373300a892c4628f70b2b416f82cce736b841b5ed5e44af1b"}, @NFTA_DATA_VALUE={0x7a, 0x1, "3f44fd67dafbba768a72a22f9977ade57685d30b392340784e64eb639ae4673b922f38e9ca582350b0656578cf3c5e2160b111534c6264d4005bb7b597594dcb0e4d9138c068e41b74509117913c36a8becc491a21ce278803cbb29bca6a8a411939704edac4401bafad18a71eefa05792d3cac0e3db"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @inner={{0xa}, @void}}, @NFTA_SET_ELEM_USERDATA={0x3c, 0x6, 0x1, 0x0, "c7b4262864d68df9eb9e610f2a31775ad6baf31372b9d6152b912f0b1c000bb6fe8ed982dd1135ca3a9046e5c469c8582548bc2451bd0ced"}, @NFTA_SET_ELEM_USERDATA={0x9d, 0x6, 0x1, 0x0, "4500e2ff39160668949ada4d9b8a367e9cc3a3e46547cca9e305593e18032c34b4c8017b660874a7ac3ab8e21a2b3c93438ac3b2effe9351f08b5b98bcaca13817012b35610647b07866324c2634baab9ddc8947a3adb8b6f34a761f4200553bcd4c998a3dd377fbcf05aef73cdba5820913905f3acf874593864e4342cd7df12fe02655fa04a443b0d6bd269691ee921d72cbfd71ba42757b"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x24, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9e1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0xb8, 0x5, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4bfa0b90}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x666b3f19}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}]}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_USERDATA={0x8, 0xc, "65ced8fc"}]}, @NFT_MSG_DELOBJ={0xd0, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x76, 0x8, "d43407a04e0c13f916b4b93a692133a0b613e612dce6c6d2793c97d02fa1f73dc1111772149fd00dff27a06186603d6648f05715be18a028f1cc2ec8b0222ad28daa178bbce94fed3ae2ab2bd533d547d19117a0ff7bf84bbd114c0a9dce138bccc7ecf04496139757ca44aa77727f4c4c3f"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x9c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_USERDATA={0x1a, 0xd, 0x1, 0x0, "527cdbbdfb478c5a66bbcd17b5b59e14145b2b02dbc6"}, @NFTA_SET_USERDATA={0x5b, 0xd, 0x1, 0x0, "61dd44db123157f745b19ff206b03c4b5f4782c12fb2b88f6ed208ff104096ab10b93db9e19f3947a09d604175d014fb22e25932a9854d23e667e41f9a50286e7e7d62200910cb116eb42172697c5c89ec2ba74cb092e6"}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_ID={0x8}]}], {0x14}}, 0x79c}, 0x1, 0x0, 0x0, 0x4}, 0x40800) syz_open_dev$sndpcmp(&(0x7f0000001500), 0x10000, 0x20000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000001540)={0x1, 0x8, 0x4}) shutdown(r6, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r9, 0x8004f50c, &(0x7f0000001580)) splice(r5, &(0x7f00000015c0)=0x80, r8, &(0x7f0000001600)=0x7fffffffffffffff, 0x6, 0x9) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000001640)={0x5, 0x0, [{0x812, 0x0, 0xffffffff}, {0x93f, 0x0, 0x8}, {0xb09, 0x0, 0x8000000000000000}, {0x4126370eeaf84b76, 0x0, 0x5}, {0x304, 0x0, 0x2}]}) write$FUSE_ENTRY(r6, &(0x7f0000003840)={0x90, 0x0, 0x0, {0x6, 0x3, 0x7, 0x6, 0x9, 0x1, {0x2, 0x7, 0x139, 0x2, 0x5, 0x2, 0x400, 0xffffffff, 0x8000, 0x4000, 0x80000000, 0x0, 0x0, 0x0, 0x81}}}, 0x90) 5.976805056s ago: executing program 2 (id=3204): io_setup(0x4, &(0x7f0000000040)=0x0) io_getevents(r0, 0x3, 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f0000000140)={0x0, 0x989680}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/185, &(0x7f0000000140)=""/92, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1ff, 0xfc, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000080)={0x1, 0x0, 0xa4}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x404, 0x0, 0x3}]}) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="2066ab"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.327501556s ago: executing program 6 (id=3207): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x395180, 0x149) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, 0x0, 0x1000) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x1, 0x1, 0x0, 0x5, '\x00', '\x00', '\x00', 0x0, 0x0, 0x9, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) (async) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xffffffffffffffa8) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c00", @ANYRES32], 0x50) (async) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="10000000000000000b000000000000100100000c0000002900000000000000a72a552f0864"], 0x28}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, 0x0) (async) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) (async) add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$key(r5, 0x0, 0x4040) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="000000000000e70000000000000000000000001173fe0e2403509752d0d7edf07420f0836fa5d7b400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fcff1f00000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008505000000bf0900000000000066090600000003e704003deacfdc00001801000020a0702500000000002020007b9af8ff00000000ac910000000073dec45c0000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b50302400000000085001700cb000000b7000000000000009500000000000000a49f789c223bfb39d1692abe58233fea6c0d871ff78c4737ce8918235cff4834a967fa9b18b0fba4a8750242544fc5639a2ff6050ef9975bc3d77a73140a1226569e06d0de4ace0caf67f888ec588b338aa0ad4668f214da87f833053d505520b9b1e213ee7777d74b7ddbfec2fd9fc17ca9df1c491d3f6dd9ef5422"], &(0x7f00000000c0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 5.088439605s ago: executing program 6 (id=3209): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) r3 = syz_io_uring_setup(0xf90, &(0x7f0000000300)={0x0, 0x77e5, 0x8, 0x3, 0x32f}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x4c8}}) io_uring_enter(r3, 0x7ffa, 0xba1c, 0x40, 0x0, 0x39) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 4.946714837s ago: executing program 5 (id=3211): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x6) (async) r2 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000c"], 0xe4}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x5562d465fe89281e, 0x1200, 0x4e4}, &(0x7f0000000040)=0x10) 4.724413172s ago: executing program 5 (id=3212): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x7a, &(0x7f0000000980)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "5156ea", 0x44, 0x2f, 0x1, @private1, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x86dd, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0xe, 0x0, 0x1, 0x1, 0x0, 0xc0}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x1, 0x3, 0x1, 0x2, 0x2, 0x40}, 0x2, {0x4, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="0203000310000000000000000000000002000900080000000a0000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000020000000000000000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 4.685346299s ago: executing program 5 (id=3213): r0 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000200c06c80c9a37189fabb00000002"]}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) fcntl$notify(r1, 0x402, 0x80000004) socket$igmp(0x2, 0x3, 0x2) pipe2$9p(0x0, 0x80800) socket(0x840000000002, 0x3, 0x100) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040001f64a0730281dac14140daaaaaaaaaafc64010100f91b0f1376dbae6affea360d1c54311afa8f2e52ab6f5661c5f11058125c6a90f69cf1aa790a8060518f973e40cccf56f4099b6a8cb3463d599ce21112fd4bd5acd4f077d3d532e78c7d9aeb04225d50d0cf4bdc318babf08c55e4227ce77c7a8a190143827a5a5b8df2812fb003011a7a47021fea9320f9066c82c9679ead"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) 4.534691675s ago: executing program 7 (id=3214): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002020000082505a1a440000102030109023b000101068004090400dd0202060004052405"], 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) rt_sigqueueinfo(0x0, 0x27, &(0x7f0000000140)={0x30, 0x8, 0x8}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 4.403307505s ago: executing program 3 (id=3215): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000240)=[@wrmsr={0x65, 0x20, {0x9c9, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x1, 0x3ff}}, @wrmsr={0x65, 0x20, {0x400, 0x4}}, @rdmsr={0x66, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x680, 0x5, 0x3ff, 0x9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x28, 0x1, 0x79a5, 0x3}}, @out_dx={0x6a, 0x28, {0xcfb9, 0x4, 0x1}}, @nested_vmlaunch={0x12f, 0x18}, @rdmsr={0x66, 0x18, {0x26d}}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x2, 0x10000}}, @nested_load_code={0x12e, 0x7a, {0x3, "c481c37c7700b805000000b9184bd6f70f01d948b809000000000000000f23d00f21f835000000020f23f866baf80cb884e4b387ef66bafc0c66ed4f0fc79e01000000c4c155e8c1470f005b00f30fc776e80fba7b4a720f20c035100000000f22c0"}}, @code={0xa, 0x63, {"363e0f1ee72e470fc76821c744240038000000c744240200680000ff2c2465640f0d06b9c6020000b80b000000ba000000000f30470f78cb3b0943ded9c462bd3a697066baf80cb824fd5184ef66bafc0cec"}}, @nested_vmresume={0x130, 0x18}, @nested_create_vm={0x12d, 0x18}, @wr_drn={0x68, 0x20, {0x0, 0x400}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x49d, 0x371d, 0x3, 0x200}}, @set_irq_handler={0xc8, 0x20, {0x6a, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x655, 0x64e, 0x250, 0x53d}}, @code={0xa, 0x44, {"460f78ecd9fd43ac8f297801f40f019ed6000000ffcdc744240000010000c7442402a9000000ff2c24450f30420f23f90f201a"}}, @in_dx={0x69, 0x20, {0x4aa0, 0x5}}, @uexit={0x0, 0x18, 0x82}, @nested_create_vm={0x12d, 0x18, 0x2}, @uexit={0x0, 0x18, 0x3}, @nested_vmresume={0x130, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x2, 0x1}}, @wr_crn={0x67, 0x20, {0x3, 0x5}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_vmresume={0x130, 0x18, 0x1}], 0x481}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f00003bf000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="260f20470f186d710fc79f0c000f01cbbaf80c66b8c84a598166efbafc0cb80800efbaa100edbad104ed0f01df660f38295309ba400066b80080000066ef", 0x93}], 0x1, 0x46, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000080)={0x5, 0x8000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.308266719s ago: executing program 6 (id=3216): clock_adjtime(0x4, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_usb_connect(0x3, 0x3b9, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a70301ab00000209046d000c3fdae20009050402ff03020eff0725010007050007250101067c08090501"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x40, @remote, 0xee33}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000340)="e049e7f8dd180676b6bf380652a880c7f81e811916b829c882d5bddca0ec20fe23e6492cd21e3541f8a7ee7c5a9ff23ebb02097149fef63f24390498631b14a3f63b5f03fa7e05d5e8f7d6fc039e1baec5daacede1d149cc3a1bb7f4742edf33f9a2a4670931a851accd82dfd10d26812a4e790b12a006efb1c885c242a0b64adc663f2b62fec846cfaa9f", 0x8b}, {&(0x7f0000000400)="05b62d4e3c8029f19bd0709d478cd87e0ff1ef9af54a55f09da6be4ace88710cdd3f8055f1f463f26305f0ab68bd8e420319b76ac36de6f2cc844ec41d22d35ea89f151b62b3fcf4c0e5a02baee3b7000084a5b9192b84bcd5cd48090ca7621e7289fe067fa396f4b63bfecabbe0886f8e3388ad5fc2fd71b105081968f0ed29dc45d7d5457b81296c3d8c027500000000000000", 0x94}, {&(0x7f0000000140)}], 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0xc0, 0x4000080}, {&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x7, @local, 0xec4a}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)="b728852c9731e0b335f1330bf01e1b2db2f040595b5ad6f674875fc920195872faf9d5c4ff0b77469646c4debbf39fc954d938eb51d7", 0x36}], 0x2, &(0x7f00000005c0)=[@init={0x18, 0x84, 0x0, {0x10, 0x31cb, 0x7ff, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x30, 0x20000880}, {&(0x7f00000006c0)=@in6={0xa, 0x4e20, 0x1, @remote, 0xfffffff9}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000700)="b8f00d67587b521cbcf5c767c70ef57cbf28c9e7699f68ec7327b01a09d8b211818137a862776a8712df1f775723b70245be5faf3471f51d4693c7d126b547902c52be3c781fd6cbddebf835ef6259fe9d0d0363a08e913718402a44ba2178c8f06c626b24ed8b8380a3873645e8cb11d0a51bf7ad5e4982a64f512d686cb9f13a7e0994fd09561523b65e70a64156f256a24a23752a04ffb9f92e40f323cb606d3051422204c4ff34478c96e8", 0xad}, {&(0x7f00000007c0)="88cdcbfeb19151ee22361240db3d260d2feabf8b6395b1d9b7fa30305890906646f7377e1a309918141e74c2c9809a26483b127da6cc9389fd8b022b195f8ef7593ea73e331e27f09f01eb3008a4fbbf4c238725de5da03c85e4d32809650b1c4f387a", 0x63}, {&(0x7f0000000840)="b409b5f4d3a88c2a569c667cadc5444b27ee193a479d60b74264f830a4be31517ab3d009f4f8e26d87738f2cb4c22005cbe5173aed1c36f1000432d0b187f4818f79f508f387e988a2adc02dd64fd9ae2c6dc52d88cb6c052ed96a83e7e6aa89785f8b8919ebe2931ed1613cdd0aed1ba0c6524879ba7fe8773f2958bf908b3234782007a37148f0f9040551187a40cd336e19e1382a37b1ea8fceae4d582833fe020f3e983ba229b4fd9fee54460231b8973746018b9ebe0f10a6", 0xbb}, {&(0x7f0000000980)="c8b77b237ddfd52b38c29845e179117ac4e606bbc866c59d5673cf971bf1d32fc2d2e7f8a492c2b9539e8b262939f2dc306629170fbb2f9d2148fd571a2319fbac7861c055de56ce21df290b27c77e10ce0b9a70fc54be2881c515a773269bb05a42b39f27663c2cad93dad09325c910f3e356be666da15ff40000d457e4ff5b899e1cc7c215438acb839eb9f440380903479e4c6ebd70ba95de0461d68a1440ef429ba094764791a31e17b0", 0xac}, {&(0x7f0000000900)="495e14118b3eab00700e99956390c1eb127ce339e65919199f6fc678a392e89438af62fe1164183d93d3a2", 0x2b}], 0x5, &(0x7f0000000ac0), 0x0, 0x24000000}, {&(0x7f0000000b00)=@in6={0xa, 0x4e22, 0xde9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000b40)="b8c122d33dc76d33f53486d11c3f3129ab23600113f3f438a46e81544b4e21fc0ada48562d42daaf7d905e17deba860eaf5fb24570035e4698406724af8f711787a81beb5de286a4417dedcbb02a2991558b3c8b330f3b64fc2e1ad4f6bf529eaa04f06826f7de09deb92adaa2ab963d4cefd79feef16ec880c5b85053404265fde4eb7a6bde8350588c1631b5dbdc13a849e5820fe000605d9bd8c8e19533a3e3de960c2590", 0xa6}], 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000008400000006000000000100000000000018000000000000000000"], 0x30, 0x20004000}], 0x4, 0x5) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x5, r3}, &(0x7f0000000080)=0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) add_key(&(0x7f0000002100)='keyring\x00', 0x0, &(0x7f0000002180), 0x0, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x8, 0x8, 0x40, 0x9}, {0x1, 0xee, 0xd4}, {0x2, 0x80, 0x9, 0x5a6}, {0x6, 0xfb, 0x4, 0x7fffffff}]}, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r6, 0x4b32, 0xf1a) 4.028105479s ago: executing program 3 (id=3217): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118f7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x2d, 0x2, 0x0) connect$qrtr(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xfffffffffffffff5, 0x0, {0x3, 0x0, 0x16f8000, 0x0, 0x3f77, 0x2, {0x0, 0x1, 0x2, 0x1, 0x0, 0x9, 0x1ff, 0xff, 0x9, 0xc000, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x200deb, 0x0, 0x3, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xc, 0x2, 0x9, @generic=0x6, 0x9, 0x9, 0x6}) unshare(0x2000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000001c0)) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_DEV_DESTROY(r6, 0x5502) 3.103474106s ago: executing program 5 (id=3218): r0 = socket$l2tp(0x2, 0x2, 0x73) readahead(r0, 0x9, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x1c8, 0x98, 0x98, 0x1c8, 0x260, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x14}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {0x59e9ca6af987edf9}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x42}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 2.889169541s ago: executing program 2 (id=3219): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket(0x10, 0x3, 0x0) (async) syz_clone(0x41080600, &(0x7f0000000180)="9f6e1bd39d57a54f5706df7d0cd45ad5d779af2515c3746fd143db4a422cdfcba7f555964f5ccb4ef30aeda579011f5b34793fd95d3b305d445d38080c83303789e4b282aae0498b966364675a7177bf925f870f115c70b49d06e9d64ced19cc233ff26a3cb61826549901fdf2a68eb8839ee07b18a22ddab5c271a95a8368ce0014391225ad1c4842df3ba0763d695dd5669d65d8c26220037879e8f7b8c7fcb501c42c1d8515349396e5824138bb33dfef8ed08f288f38badc3031b8c416", 0xbf, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="fa2b47bfed72b087e154f4e84e95c5ddf95ae7548b2581168fb67a7d9cc6962ca72eb6eab58d6aae0190bad58fd3ed9147d14194f2c957c422f19c9614db88f50aafd8edade083809884d24e375924548a35ba13ae018f23f676c7bcf5eda9") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {}, [@RTA_OIF={0x4}]}, 0x24}}, 0x0) (async) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) 2.780558314s ago: executing program 5 (id=3220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000480)={0x1, 0x0, [{0x486, 0x0, 0x2}]}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x20000632) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r3) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0xd, 0x0, 0x3631564e, 0x5, 0x0, 0x0, 0x7}}) r7 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SETSIGMASK(0x420b, r7, 0x8, &(0x7f0000000000)={[0x2]}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x6, {[@local=@item_012={0x0, 0x2, 0x9}, @global=@item_4={0x3, 0x1, 0x5, 'E\x00'}]}}, 0x0}, 0x0) ptrace$cont(0x9, r7, 0x32db, 0x8) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000280)={[0x3, 0x9, 0x0, 0xf81, 0x1f, 0x5, 0x2, 0xcc, 0x6, 0x5, 0xc, 0xc2, 0xfffffffffffffff8, 0x334c0b55, 0x7, 0x6], 0xeeef7000, 0xa200}) 2.665340314s ago: executing program 3 (id=3221): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800, 0x7) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000400)) sendmmsg$inet6(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) exit(0xfe) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="a1ab00000000040000003200000008000300", @ANYRES32=r6, @ANYBLOB="20b592dfc46451dddeb7ca111dcb1e6c2a27a5eb317b855a34a1a1b7bab96279a2f5a2a586b96adc61c459efdffea752b9faf0b37433843524497d58c6b03d7296f6d53333ac5ed200a0872ebe09f85378211feb84ff16ad4c847cc1c0d1639bb9fa64e12f651c2a42de860704982a2ae3d776"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r7, &(0x7f0000000000)=""/43, 0x2b) getdents64(r7, 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r8, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0xfffffffd, 0x4, 0x800}, 0x3c) setsockopt$MRT_ADD_MFC(r8, 0x0, 0xcc, &(0x7f0000000200)={@rand_addr=0x64010101, @private, 0x0, "606b177019311f4d7ed79c11e2e0f1da000000002300000020fff20000000600", 0x1, 0x1, 0x3}, 0x3c) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x387f00) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) madvise(&(0x7f00002a3000/0x2000)=nil, 0x2000, 0xc) 2.168477331s ago: executing program 2 (id=3222): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) (async) socket(0x3, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x2, 0x4000) (async) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f00000002c0)="480000001400190d09eafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d7359031037f817f000000dcb9183600fcff00000101ff05c00e030002000000ffff01", 0x46}], 0x0) (async) io_setup(0x202, &(0x7f0000000200)=0x0) r5 = eventfd(0x100) (async) r6 = socket(0x1e, 0x4, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000240)={0x90000005}) (async) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000000480)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r5, 0x0, 0x0, 0xf}]) (async) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) (async) io_setup(0x5, &(0x7f0000000e80)=0x0) (async) r10 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(r9, 0x2, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r10, &(0x7f0000000080)}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x2, r8}]) (async) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000004c0)={r8, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x4, 0x10, 0x19, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1e831fa79a", "715237601a0100b07dcc141802c4dacf162e4303000000200000000000a04100", [0xfffffffffffffce8, 0xa]}}) (async) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x200, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xe0}}, 0xc000) 1.47006658s ago: executing program 7 (id=3223): socket(0x15, 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001f6be62099045a1092520102030109023400010200100009040d020279082c010824020108030105082402010003060809ffff080002020000090582020002"], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'syz_tun\x00', @ifru_names='syz_tun\x00'}}) 1.136873566s ago: executing program 6 (id=3224): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x0, 0x0, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2d, 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x11da00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0xffffffff, "030000000000000023000000debd12ffff00000000000000000020000400"}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x1, 0x5, 0x3, 0x0, 0xf772, 0x7}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = inotify_init() r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x306) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd70400100000008000300"/26, @ANYRES32=r11, @ANYBLOB="05002f0000000000"], 0x2c}}, 0x18) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000001340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="100025bd7000fbdbdf250f0000000500340009000000000000000900000005003800000000000800390009000000050037000000000005002a0000000000050077a58fd0d6802d000000000005007389cfcc472d0001000000060028"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) close_range(r5, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r1, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) 977.682668ms ago: executing program 3 (id=3225): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@gettaction={0x28, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbbd1}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="95a722a3afbb1937e924000000", @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0800050007000000"], 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) close(r2) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050003000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="0a0000d143f0c12372d6a91a5ff52f61ded6cdf463f5fcb6fef249a184ea33441fe432b5fcc2d6452af0af873b1ee413ac7ae825b97da9201118e3013312b53a6402d0f50a4906f17233d5486245f9ae2d6ca13b9fb9583ad66c17ae8185"], 0x28}}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$pppoe(0x18, 0x1, 0x0) 528.335373ms ago: executing program 5 (id=3226): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\nV'], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x19, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000001}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, @exit, @ldst={0x2, 0x3, 0x4, 0xb, 0xb, 0xfffffffffffffff8}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x0, 0x0, 0x7, 0xa, 0x40, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x12}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x2, 0x50, &(0x7f0000000540)=""/80, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0xe, 0x4, 0xde}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000740)=[{0x0, 0x3, 0x3, 0x9}, {0x2, 0x3, 0xd, 0x3}], 0x10, 0xfffffff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x2}, 0xffffffffffffffe9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032"], 0x148}}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)={0x2dc, 0x12, 0x400, 0x70bd25, 0x25dfdbfe, {0x2c, 0x1, 0xf8, 0xfb, {0x4e20, 0x4e23, [0x5, 0x7fff, 0xffffc1b6, 0x8], [0x9, 0x6, 0x6], 0x0, [0x1, 0x3]}, 0xffffffff, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "731b1a77b2f3e18f9edb9379a5dbce63210353e5c7823065f629f19b603760b985564d2ec1a4156ac63284194de93327858da19101cbac1cc1ad2d43dbba15466d294d5f11067556e647cf6f344f6d72314d2853917ebc7a1042fed4ca9f026cfbf53676328657cf773beb4241ac4117be37bd2e2ff9794fdf5225abcdf0f3af7744f0df343bcd6e34"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "edcc23b299446ecbf95a43502726fb14626ffe5db8897a7a90e6ee7dabc51f28eed1072ddff28f398ba3b3deea04167466900adbdf05542a49035a194ebe8d21edf5fa2cc80df53b6d470d82451ddb3ccc2d3395d5e8cf4f92fba104c62423fef3c7a6236e85db8ff54810a6f8c8e272ab8726c3a4faf817411a43725ac8453d9aad3237081476fef6461d952e7a7546686f71c3d7df733b8ea7ba70a06dfbc586eb60f15be4735cfd583813"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "08cdd0cf8af07ba4fd34540e8486ffd880b1926d7466bf7c0ed1d99ead91ed5466b2f4a6f3266fb9ceec57e6ba58cf491aaabc2b802b8707a5"}, @INET_DIAG_REQ_BYTECODE={0x43, 0x1, "31697e285f226a7c22a0783c4e88bf9cb2ce380236db9389ba1e017a15d836729a01f16e2b08e4937f3f7c27dc023d415a75d0e092dda5db9ea6cb926c4aa3"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "206dfe3303de54e25c9caa153d3268b490179e8d79ea466385b3bbb4906bb69bde40832e5c92d76d86112772af9c1158033c3b473483a6dd5371eee09509d85af3a119350727a11664ff5c26c851a8f5e34e1ec8aff40b47877551f4c52e92f99a5e512f609c9fd0410596e3a391f7145ca19bb987b9a4575dc78475b59412535314d6a20c242ce07d07f5f43b2fe40dbf3e22990d115e19fd0ef91af3f764854f04049b108876b46c11b2f0a84b7976d6591d99ab694c8e4773dd2697496c6041ebf1ba8cbed2"}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x80}, 0x4010) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="ec4969ce12aee5cbcb87448d7b8d39e591", 0x11}], 0x1}}], 0x1, 0x20000800) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x800) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc6, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req={0x4, 0x9, 0xfff, 0x1ef0}, 0x10) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="7fe23464cb5361a7b33fbdaa5912f0b8ccdd1eb586b54da430382d4954d4956cfd1aab476b31f27103d3c12517a2bbcea90357f41257a658bc4ce94cad04ae33c5", 0x41) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xa, "92"}, @local=@item_012={0x1, 0x2, 0x9, '\n'}, @local=@item_012={0x0, 0x2, 0x9}]}}, 0x0}, 0x0) 0s ago: executing program 2 (id=3227): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0xfff, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1be, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7fff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0xfff, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1be, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7fff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x1) (async) landlock_restrict_self(0xffffffffffffffff, 0x1) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x7ffffffe) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) (async) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000110}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000c0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x4, 0x3, @vifc_lcl_addr=@private=0xa010100, @local}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000400)={@link_local, @link_local, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x1, 0x1, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ed6c4", 0x44, 0x2f, 0xff, @empty, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x1, {0x801}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x2, {0x3}}}}}}}}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r7, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="1c0000008100000005a0d6badb00000000000000000000000c00000000000000fcffffff"], &(0x7f0000001500), 0x200) (async) name_to_handle_at(r7, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="1c0000008100000005a0d6badb00000000000000000000000c00000000000000fcffffff"], &(0x7f0000001500), 0x200) sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) recvmmsg(r6, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2040, 0x0) kernel console output (not intermixed with test programs): 8][ T5893] usb 3-1: Manufacturer: syz [ 880.816455][ T5893] usb 3-1: SerialNumber: syz [ 880.831857][ T5893] usb 3-1: config 0 descriptor?? [ 880.840926][ T5893] peak_usb 3-1:0.99: probe with driver peak_usb failed with error 99 [ 881.657629][T17487] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2862'. [ 881.674444][T17489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.684847][T17489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.912783][T17502] netlink: 'syz.3.2864': attribute type 1 has an invalid length. [ 882.006698][T17508] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2866'. [ 882.312005][ T58] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 882.474137][ T58] usb 4-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 882.494289][ T58] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.515178][ T58] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.526334][ T58] usb 4-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 882.542783][ T58] usb 4-1: config 0 interface 0 has no altsetting 0 [ 882.551305][ T58] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 882.572291][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.587436][ T58] usb 4-1: config 0 descriptor?? [ 882.603974][ T58] hub 4-1:0.0: USB hub found [ 882.795453][ T58] hub 4-1:0.0: 4 ports detected [ 882.849025][ T58] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 882.856454][ T58] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 882.894516][ T58] usb 4-1: USB disconnect, device number 99 [ 883.136477][ T58] usb 3-1: USB disconnect, device number 87 [ 883.541742][ T58] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 883.695029][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.705881][ T58] usb 4-1: config 0 has no interfaces? [ 883.708105][T17536] netlink: 'syz.5.2874': attribute type 1 has an invalid length. [ 883.711450][ T58] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 883.711484][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.742800][ T58] usb 4-1: config 0 descriptor?? [ 883.794669][T17536] 8021q: adding VLAN 0 to HW filter on device bond9 [ 883.822794][T17538] bond9: (slave gretap2): making interface the new active one [ 883.831555][T17538] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 883.855282][T17536] macsec1: entered promiscuous mode [ 883.860839][T17536] macsec1: entered allmulticast mode [ 884.102931][T17540] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2875'. [ 884.114452][T17540] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2875'. [ 884.282850][T17546] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2877'. [ 884.431015][T17549] netlink: 'syz.2.2879': attribute type 2 has an invalid length. [ 884.691418][T17554] bridge_slave_0: left allmulticast mode [ 884.721903][T17554] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.292012][ T9] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 885.526179][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 885.558382][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 885.595335][ T9] usb 3-1: config 2 has an invalid interface number: 212 but max is 1 [ 885.625141][ T9] usb 3-1: config 2 has an invalid interface number: 226 but max is 1 [ 885.645604][T17562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.658896][ T9] usb 3-1: config 2 has no interface number 0 [ 885.672408][T17562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.683547][ T9] usb 3-1: config 2 has no interface number 1 [ 885.696376][ T9] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 885.722614][ T9] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 885.756130][ T9] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 885.768516][ T9] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 885.780015][ T9] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 885.795330][ T9] usb 3-1: config 2 interface 212 has no altsetting 0 [ 885.812598][ T9] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 885.823848][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.832213][ T9] usb 3-1: Product: syz [ 885.836560][ T9] usb 3-1: Manufacturer: syz [ 885.841363][ T9] usb 3-1: SerialNumber: syz [ 885.934126][T17562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.964556][T17562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.987235][ T58] usb 4-1: string descriptor 0 read error: -71 [ 886.014579][ T58] usb 4-1: USB disconnect, device number 100 [ 886.128681][ T9] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input92 [ 886.231578][ T9] usb 3-1: USB disconnect, device number 88 [ 887.513657][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 887.732210][ T9] usb 3-1: device descriptor read/64, error -71 [ 888.024610][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 888.271757][ T9] usb 3-1: device descriptor read/64, error -71 [ 888.383118][ T9] usb usb3-port1: attempt power cycle [ 888.751849][ T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 888.784231][ T9] usb 3-1: device descriptor read/8, error -71 [ 889.041767][ T9] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 889.162589][ T9] usb 3-1: device descriptor read/8, error -71 [ 889.432959][ T9] usb usb3-port1: unable to enumerate USB device [ 890.021868][ T935] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 890.153585][ T935] usb 4-1: device descriptor read/64, error -71 [ 890.197079][T17636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.207229][T17636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.401933][ T935] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 890.532041][ T935] usb 4-1: device descriptor read/64, error -71 [ 890.644394][ T935] usb usb4-port1: attempt power cycle [ 890.701877][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 890.852218][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 890.868311][ T9] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 890.880146][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.909545][ T9] usb 3-1: Product: syz [ 890.919754][ T9] usb 3-1: Manufacturer: syz [ 890.934784][ T9] usb 3-1: SerialNumber: syz [ 890.953524][ T9] usb 3-1: config 0 descriptor?? [ 890.983840][ T935] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 890.996756][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 891.031861][ T935] usb 4-1: device descriptor read/8, error -71 [ 891.124219][T17647] syz.5.2906 (17647): /proc/17643/oom_adj is deprecated, please use /proc/17643/oom_score_adj instead. [ 891.271907][ T935] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 891.306220][ T935] usb 4-1: device descriptor read/8, error -71 [ 891.408055][ T9] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 891.422934][ T935] usb usb4-port1: unable to enumerate USB device [ 891.442227][ T9] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 891.465700][ T9] usb 3-1: USB disconnect, device number 93 [ 892.011946][T17655] netlink: 'syz.7.2908': attribute type 2 has an invalid length. [ 892.026524][T17655] : entered promiscuous mode [ 892.138641][T17657] GUP no longer grows the stack in syz.7.2908 (17657): 200000005000-200000008000 (200000004000) [ 892.150473][T17657] CPU: 1 UID: 0 PID: 17657 Comm: syz.7.2908 Tainted: G L syzkaller #0 PREEMPT(full) [ 892.150510][T17657] Tainted: [L]=SOFTLOCKUP [ 892.150519][T17657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 892.150532][T17657] Call Trace: [ 892.150542][T17657] [ 892.150553][T17657] dump_stack_lvl+0xe8/0x150 [ 892.150588][T17657] fixup_user_fault+0x64a/0x700 [ 892.150623][T17657] fault_in_user_writeable+0x72/0xe0 [ 892.150644][T17657] futex_lock_pi+0x773/0xa90 [ 892.150680][T17657] ? __pfx_futex_lock_pi+0x10/0x10 [ 892.150738][T17657] ? __pfx_futex_wake_mark+0x10/0x10 [ 892.150775][T17657] ? __pfx_futex_wake+0x10/0x10 [ 892.150801][T17657] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 892.150828][T17657] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 892.150857][T17657] do_futex+0x292/0x420 [ 892.150878][T17657] ? __pfx_do_futex+0x10/0x10 [ 892.150895][T17657] ? __vm_munmap+0x2c1/0x380 [ 892.150922][T17657] __se_sys_futex+0x36f/0x400 [ 892.150944][T17657] ? __pfx___se_sys_futex+0x10/0x10 [ 892.150962][T17657] ? rcu_is_watching+0x15/0xb0 [ 892.150987][T17657] ? __x64_sys_futex+0x21/0xf0 [ 892.151006][T17657] do_syscall_64+0xec/0xf80 [ 892.151026][T17657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.151041][T17657] ? trace_irq_disable+0x37/0x100 [ 892.151063][T17657] ? clear_bhb_loop+0x60/0xb0 [ 892.151083][T17657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.151114][T17657] RIP: 0033:0x7f9de0d8f749 [ 892.151131][T17657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.151146][T17657] RSP: 002b:00007f9de1bc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 892.151164][T17657] RAX: ffffffffffffffda RBX: 00007f9de0fe6180 RCX: 00007f9de0d8f749 [ 892.151177][T17657] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 892.151188][T17657] RBP: 00007f9de0e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 892.151198][T17657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.151208][T17657] R13: 00007f9de0fe6218 R14: 00007f9de0fe6180 R15: 00007f9de110fa28 [ 892.151233][T17657] [ 892.635691][T17658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2909'. [ 892.655271][T17658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2909'. [ 892.783019][T17659] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 892.802086][T17659] kvm: requested 145828 ns i8254 timer period limited to 200000 ns [ 892.848046][T17659] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 892.886199][T17659] kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 892.913292][T17659] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 892.933382][T17664] fuse: Unknown parameter '.X00000000000000000000006' [ 892.950153][T17659] kvm: requested 87161 ns i8254 timer period limited to 200000 ns [ 892.965500][ T9] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 892.988597][T17659] kvm: requested 102247 ns i8254 timer period limited to 200000 ns [ 893.006168][T17659] kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 893.017044][T17659] kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 893.026033][T17659] kvm: requested 154209 ns i8254 timer period limited to 200000 ns [ 893.127313][ T9] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 893.137604][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.151859][ T9] usb 3-1: Product: syz [ 893.161871][ T9] usb 3-1: Manufacturer: syz [ 893.170139][ T9] usb 3-1: SerialNumber: syz [ 893.190492][ T9] usb 3-1: config 0 descriptor?? [ 893.207567][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 893.222303][T17674] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2911'. [ 894.441452][T17691] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2917'. [ 894.471852][ T58] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 894.522657][ T9] gspca_stk1135: reg_w 0x7 err -110 [ 894.536119][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 894.544080][ T9] gspca_stk1135: Sensor write failed [ 894.550922][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 894.559475][ T9] gspca_stk1135: Sensor write failed [ 894.567353][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 894.576547][ T9] gspca_stk1135: Sensor read failed [ 894.583660][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 894.591787][ T9] gspca_stk1135: Sensor read failed [ 894.597469][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 894.604973][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 894.612000][ T9] gspca_stk1135: Sensor read failed [ 894.620096][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 894.630220][ T9] gspca_stk1135: Sensor read failed [ 894.637186][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 894.643867][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 894.650795][ T58] usb 4-1: too many configurations: 168, using maximum allowed: 8 [ 894.659196][ T9] gspca_stk1135: Sensor write failed [ 894.666062][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 894.673547][ T9] gspca_stk1135: Sensor write failed [ 894.681297][ T58] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 894.689935][ T9] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 894.698864][ T58] usb 4-1: can't read configurations, error -61 [ 894.825691][ T10] usb 3-1: USB disconnect, device number 94 [ 894.854029][ T58] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 895.022103][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 895.045138][ T58] usb 4-1: too many configurations: 168, using maximum allowed: 8 [ 895.075460][ T58] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 895.095733][ T58] usb 4-1: can't read configurations, error -61 [ 895.105341][ T58] usb usb4-port1: attempt power cycle [ 895.251538][T17698] netlink: 388 bytes leftover after parsing attributes in process `syz.7.2920'. [ 895.291983][ T5893] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 895.419063][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 895.419083][ T30] audit: type=1326 audit(1768892034.548:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17703 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 895.451175][ T30] audit: type=1326 audit(1768892034.578:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17703 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 895.474753][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 895.481519][ T30] audit: type=1326 audit(1768892034.578:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17703 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 895.483393][ T58] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 895.505040][ T30] audit: type=1326 audit(1768892034.578:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17703 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 895.505412][ T30] audit: type=1326 audit(1768892034.578:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17703 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 895.505461][ T30] audit: type=1326 audit(1768892034.578:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17703 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 895.596619][ T30] audit: type=1326 audit(1768892034.578:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17703 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 895.619979][ T30] audit: type=1326 audit(1768892034.578:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17703 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 895.643493][ T5893] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 895.653591][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 895.658032][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.660938][ T58] usb 4-1: too many configurations: 168, using maximum allowed: 8 [ 895.667565][ T5893] usb 3-1: Product: syz [ 895.667587][ T5893] usb 3-1: Manufacturer: syz [ 895.667604][ T5893] usb 3-1: SerialNumber: syz [ 895.672249][ T30] audit: type=1326 audit(1768892034.578:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17703 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 895.721788][ T30] audit: type=1326 audit(1768892034.578:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17703 comm="syz.6.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 895.755076][ T58] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 895.778973][ T58] usb 4-1: can't read configurations, error -61 [ 895.922174][ T58] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 895.934926][ T5893] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 895.950331][ T5893] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 895.962537][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 895.962844][ T5893] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 895.971519][ T58] usb 4-1: too many configurations: 168, using maximum allowed: 8 [ 895.986392][ T5893] usb 3-1: media controller created [ 896.005837][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 896.025107][ T58] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 896.036912][ T58] usb 4-1: can't read configurations, error -61 [ 896.061361][ T58] usb usb4-port1: unable to enumerate USB device [ 896.142764][ T5893] zl10353_read_register: readreg error (reg=127, ret==-71) [ 896.195619][ T5893] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 896.233877][ T5893] usb 3-1: USB disconnect, device number 95 [ 896.749258][T17726] x_tables: duplicate underflow at hook 3 [ 896.998090][T17730] netlink: 'syz.2.2930': attribute type 21 has an invalid length. [ 897.009309][T17730] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2930'. [ 897.399572][T17752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.413418][T17752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.554302][ T5885] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 897.752114][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 897.765621][ T5885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.787288][ T5885] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 897.807742][ T935] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 897.832128][ T5885] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 897.851454][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.868827][ T5885] usb 3-1: Product: syz [ 897.879020][ T5885] usb 3-1: Manufacturer: syz [ 897.889194][ T5885] usb 3-1: SerialNumber: syz [ 897.915553][ T5885] usb 3-1: bad CDC descriptors [ 897.931461][ T5885] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 897.945529][ T5885] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 897.972031][ T935] usb 4-1: Using ep0 maxpacket: 16 [ 897.986635][ T935] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 898.027984][ T935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 898.054942][ T935] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 898.064649][ T935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.081897][ T935] usb 4-1: Product: syz [ 898.090290][ T935] usb 4-1: Manufacturer: syz [ 898.106549][ T935] usb 4-1: SerialNumber: syz [ 898.138786][ T935] usb 4-1: config 0 descriptor?? [ 898.170586][ T935] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 898.201448][ T935] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 898.289738][T17759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.309790][T17759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.422280][ T935] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 898.438978][ T935] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 898.456605][ T935] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 898.529623][ T935] em28xx 4-1:0.0: No AC97 audio processor [ 898.646862][ T935] usb 4-1: USB disconnect, device number 109 [ 898.668587][T17772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2940'. [ 898.679827][ T935] em28xx 4-1:0.0: Disconnecting em28xx [ 898.734055][ T935] em28xx 4-1:0.0: Freeing device [ 898.745196][T17772] openvswitch: netlink: Missing key (keys=40, expected=80) [ 898.892468][T17776] netlink: 'syz.6.2942': attribute type 1 has an invalid length. [ 898.985034][T17776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 899.016997][T17780] macvlan2: entered promiscuous mode [ 899.022643][T17780] macvlan2: entered allmulticast mode [ 899.038216][T17780] bond3: entered promiscuous mode [ 899.071917][ T935] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 899.082974][T17780] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 899.133782][T17780] bond3: left promiscuous mode [ 899.161464][T17779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.170978][T17779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.231969][ T935] usb 4-1: Using ep0 maxpacket: 16 [ 899.253626][ T935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.271349][ T935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 899.283361][ T935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 899.303334][ T935] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 899.334530][ T935] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 899.353963][ T935] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 899.363692][ T935] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 899.373292][ T935] usb 4-1: Manufacturer: syz [ 899.384466][T17776] bond3: (slave ip6gretap1): making interface the new active one [ 899.398107][ T5893] usb 3-1: USB disconnect, device number 96 [ 899.446438][ T935] usb 4-1: config 0 descriptor?? [ 899.452997][T17776] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 899.483119][T17782] macvlan2: entered promiscuous mode [ 899.490896][T17782] macvlan2: entered allmulticast mode [ 899.499197][T17782] bond3: entered promiscuous mode [ 899.505710][T17782] ip6gretap1: entered promiscuous mode [ 899.514495][T17782] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 899.524147][T17782] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1 [ 899.540223][T17782] bond3: left promiscuous mode [ 899.546732][T17782] ip6gretap1: left promiscuous mode [ 899.723524][ T935] rc_core: IR keymap rc-hauppauge not found [ 899.729697][ T935] Registered IR keymap rc-empty [ 899.740451][ T935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 899.772494][ T935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 899.796317][ T935] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 899.824419][T17788] fuse: Bad value for 'group_id' [ 899.829847][T17788] fuse: Bad value for 'group_id' [ 899.849736][ T935] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input94 [ 899.863996][T17768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.882445][T17769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.891215][T17768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.907930][T17769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.937721][ T935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.006661][ T935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.044671][ T935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.091797][ T935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.108792][T17793] tipc: Enabled bearer , priority 0 [ 900.121503][T17793] syzkaller0: entered promiscuous mode [ 900.128244][T17793] syzkaller0: entered allmulticast mode [ 900.134389][ T935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.167561][ T935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.180085][T17793] tipc: Resetting bearer [ 900.191897][ T935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.212314][ T935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.241934][ T935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.262356][ T935] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.306586][ T935] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 900.327970][ T935] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 900.348798][T17791] tipc: Resetting bearer [ 900.400069][T17791] tipc: Disabling bearer [ 900.406528][ T935] usb 4-1: USB disconnect, device number 110 [ 901.012479][ T5893] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 901.102502][ T5982] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 901.127860][ T5982] dvb_usb_az6027 7-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 901.170568][ T5982] usb 7-1: USB disconnect, device number 121 [ 901.228037][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 901.239665][ T5893] usb 4-1: not running at top speed; connect to a high speed hub [ 901.260650][ T5893] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 901.276702][ T5893] usb 4-1: config 0 has no interface number 0 [ 901.291087][ T5893] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 901.313907][ T5893] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 901.344403][ T5893] usb 4-1: config 0 interface 88 has no altsetting 0 [ 901.378085][ T5893] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 901.408293][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 901.444451][ T5893] usb 4-1: Product: syz [ 901.460245][ T5893] usb 4-1: Manufacturer: syz [ 901.480163][ T5893] usb 4-1: SerialNumber: syz [ 901.499449][ T5893] usb 4-1: config 0 descriptor?? [ 901.752925][ T5893] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input95 [ 901.765903][T17809] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 901.772507][T17809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 901.863810][T17809] vhci_hcd vhci_hcd.0: Device attached [ 901.879692][ T5893] usb 4-1: USB disconnect, device number 111 [ 901.900197][T17812] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 901.906880][T17812] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 901.921845][T17812] vhci_hcd vhci_hcd.0: Device attached [ 901.937141][T17816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.946145][T17816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.134550][ T935] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 902.151797][ T9] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 902.313136][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 902.339418][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 902.366065][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.374853][ T9] usb 7-1: Product: syz [ 902.379156][ T9] usb 7-1: Manufacturer: syz [ 902.389711][ T9] usb 7-1: SerialNumber: syz [ 902.420651][ T9] usb 7-1: config 0 descriptor?? [ 902.637628][ T9] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 902.651824][ T5982] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 902.721336][T17829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.732193][T17829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.814121][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 902.825809][ T5982] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 902.835771][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.848092][ T5982] usb 4-1: config 0 descriptor?? [ 903.058733][T17823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.068106][T17823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.299918][ T5982] acrux 0003:1A34:F705.0046: unexpected long global item [ 903.316356][ T5982] acrux 0003:1A34:F705.0046: parse failed [ 903.325913][ T5982] acrux 0003:1A34:F705.0046: probe with driver acrux failed with error -22 [ 903.481859][ T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 903.676862][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 903.691298][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.718939][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 903.741870][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.759551][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.787130][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 903.800930][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 903.818831][ T10] usb 3-1: Product: syz [ 903.827849][ T10] usb 3-1: Manufacturer: syz [ 903.848067][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 903.859047][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 903.871223][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 903.882405][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 904.053308][T17832] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 904.068591][T17812] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(9) [ 904.075305][T17812] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 904.082735][T17809] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(12) [ 904.089462][T17809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 904.102721][T17812] vhci_hcd vhci_hcd.0: Device attached [ 904.109214][ T5893] usb 3-1: USB disconnect, device number 97 [ 904.141715][T17809] vhci_hcd vhci_hcd.0: Device attached [ 904.194825][T17845] vhci_hcd: connection closed [ 904.195134][T13167] vhci_hcd vhci_hcd.6: stop threads [ 904.206170][T17810] vhci_hcd: connection reset by peer [ 904.207333][T17844] vhci_hcd: connection closed [ 904.211799][T17813] vhci_hcd: connection closed [ 904.225460][ T9] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 904.247140][T13167] vhci_hcd vhci_hcd.6: release socket [ 904.253140][T13167] vhci_hcd vhci_hcd.6: disconnect device [ 904.264188][ T9] usb 7-1: USB disconnect, device number 122 [ 904.302037][T13167] vhci_hcd vhci_hcd.6: stop threads [ 904.315176][T13167] vhci_hcd vhci_hcd.6: release socket [ 904.402250][T13167] vhci_hcd vhci_hcd.6: disconnect device [ 904.408367][T13167] vhci_hcd vhci_hcd.6: stop threads [ 904.423286][T13167] vhci_hcd vhci_hcd.6: release socket [ 904.467466][T13167] vhci_hcd vhci_hcd.6: disconnect device [ 904.498264][T13167] vhci_hcd vhci_hcd.6: stop threads [ 904.519169][T13167] vhci_hcd vhci_hcd.6: release socket [ 904.559945][T13167] vhci_hcd vhci_hcd.6: disconnect device [ 904.774760][ T5893] usb 4-1: USB disconnect, device number 112 [ 904.960385][T17860] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 905.151905][ T10] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 905.167438][T17865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 905.185792][T17865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 905.194513][T17865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 905.205722][T17865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 905.217041][T17865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 905.362901][T17869] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.2963'. [ 905.381994][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 905.432983][T17872] netlink: 'syz.2.2965': attribute type 10 has an invalid length. [ 905.491951][ T10] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 905.500197][ T10] usb 7-1: config 0 has no interface number 0 [ 905.539392][ T10] usb 7-1: config 0 interface 184 has no altsetting 0 [ 905.556859][T17872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2965'. [ 905.622866][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 905.632134][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.640174][ T10] usb 7-1: Product: syz [ 905.646614][ T10] usb 7-1: Manufacturer: syz [ 905.650356][T17872] dummy0: entered promiscuous mode [ 905.651346][ T10] usb 7-1: SerialNumber: syz [ 905.666761][ T10] usb 7-1: config 0 descriptor?? [ 905.685913][ T10] smsc75xx v1.0.0 [ 905.706292][T17870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.717565][T17872] bridge0: port 1(dummy0) entered blocking state [ 905.762504][T17872] bridge0: port 1(dummy0) entered disabled state [ 905.786613][T17872] dummy0: entered allmulticast mode [ 905.797796][T17870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.857819][T17872] bridge0: port 1(dummy0) entered blocking state [ 905.864446][T17872] bridge0: port 1(dummy0) entered forwarding state [ 905.921161][T17882] tipc: Enabled bearer , priority 0 [ 905.974900][T17883] syzkaller0: entered promiscuous mode [ 906.011830][T17883] syzkaller0: entered allmulticast mode [ 906.169684][ T5976] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 906.298219][T17881] tipc: Resetting bearer [ 906.659134][T17889] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20003 [ 906.661336][ T5976] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 906.728116][T17875] tipc: Resetting bearer [ 906.952977][T17875] tipc: Disabling bearer [ 907.018594][ T5976] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.224328][ T5976] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.246572][ T935] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 907.253344][ T5150] Bluetooth: hci5: command tx timeout [ 907.684075][T17867] chnl_net:caif_netlink_parms(): no params data found [ 907.837554][ T5976] bridge_slave_1: left allmulticast mode [ 907.843676][ T5976] bridge_slave_1: left promiscuous mode [ 907.858659][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.891759][ T5976] bridge_slave_0: left allmulticast mode [ 907.912565][ T5976] bridge_slave_0: left promiscuous mode [ 907.937061][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.140879][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 908.180770][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 908.215865][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 908.313946][ T10] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 908.369745][ T10] usb 7-1: USB disconnect, device number 123 [ 908.425974][ T5976] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 908.444230][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2970'. [ 908.459872][ T5976] ip6gretap1 (unregistering): left allmulticast mode [ 909.336240][ T5150] Bluetooth: hci5: command tx timeout [ 909.462009][T17932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.493261][T17932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.506612][ T5976] bond7 (unregistering): (slave gretap1): Releasing active interface [ 909.841768][ T5893] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 909.878746][ T5976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.889330][ T5976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.899058][ T5976] bond0 (unregistering): Released all slaves [ 909.991809][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 909.999035][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.010783][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.021182][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 910.036047][ T5893] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 910.048683][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.062440][ T5893] usb 3-1: config 0 descriptor?? [ 910.107523][T17936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.130805][T17936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.220922][ T5976] bond1 (unregistering): Released all slaves [ 910.239779][ T5976] bond2 (unregistering): Released all slaves [ 910.282268][T17938] fuse: Bad value for 'fd' [ 910.460916][ T5976] bond3 (unregistering): Released all slaves [ 910.473322][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 910.480855][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 910.488479][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 910.495747][ T5893] usbhid 3-1:0.0: can't add hid device: -32 [ 910.502816][ T5893] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 910.533163][ T5893] usb 3-1: USB disconnect, device number 98 [ 910.686819][T17938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.703245][T17938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.729365][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 910.729383][ T30] audit: type=1326 audit(1768892049.848:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17935 comm="syz.5.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abdf8f749 code=0x7ffc0000 [ 910.770943][ T30] audit: type=1326 audit(1768892049.848:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17935 comm="syz.5.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f0abdf8f749 code=0x7ffc0000 [ 910.821591][ T30] audit: type=1326 audit(1768892049.848:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17935 comm="syz.5.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abdf8f749 code=0x7ffc0000 [ 910.857098][ T5976] bond4 (unregistering): Released all slaves [ 910.864202][ T30] audit: type=1326 audit(1768892049.848:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17935 comm="syz.5.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abdf8f749 code=0x7ffc0000 [ 910.897662][ T5976] bond5 (unregistering): Released all slaves [ 910.913767][ T5976] bond6 (unregistering): Released all slaves [ 911.108604][ T5976] bond7 (unregistering): Released all slaves [ 911.133451][T17913] bridge_slave_1: left allmulticast mode [ 911.139271][T17913] bridge_slave_1: left promiscuous mode [ 911.145569][T17913] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.196500][T17913] bridge_slave_0: left allmulticast mode [ 911.218649][T17913] bridge_slave_0: left promiscuous mode [ 911.241310][T17913] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.354350][ T5976] tipc: Left network mode [ 911.402016][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 911.416230][ T5150] Bluetooth: hci5: command tx timeout [ 911.465711][T17867] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.478630][T17867] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.486749][T17867] bridge_slave_0: entered allmulticast mode [ 911.494847][T17867] bridge_slave_0: entered promiscuous mode [ 911.506583][T17867] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.521394][T17867] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.529725][T17867] bridge_slave_1: entered allmulticast mode [ 911.537606][T17867] bridge_slave_1: entered promiscuous mode [ 911.612875][ T9] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 911.621223][ T9] usb 3-1: config 0 has no interface number 0 [ 911.638119][T17867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.648412][ T9] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 911.682506][ T9] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 911.700433][T17867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.709783][ T9] usb 3-1: config 0 interface 255 has no altsetting 0 [ 911.725953][ T5976] hsr_slave_0: left promiscuous mode [ 911.731584][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 911.740892][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.751867][ T5982] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 911.768046][ T9] usb 3-1: config 0 descriptor?? [ 911.773353][ T5976] hsr_slave_1: left promiscuous mode [ 911.779726][ T5976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.789212][ T9] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 911.799798][ T5976] batman_adv: batadv0: Removing interface: dummy0 [ 911.825939][ T5976] team0 (unregistering): Port device batadv1 removed [ 911.911877][ T5982] usb 7-1: Using ep0 maxpacket: 16 [ 911.925129][ T5982] usb 7-1: config 1 has an invalid interface number: 214 but max is 0 [ 911.947862][ T5982] usb 7-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 911.979312][ T5982] usb 7-1: config 1 has no interface number 0 [ 912.019579][ T935] usb 3-1: USB disconnect, device number 99 [ 912.025971][ T5982] usb 7-1: too many endpoints for config 1 interface 214 altsetting 2: 203, using maximum allowed: 30 [ 912.060974][ T5982] usb 7-1: config 1 interface 214 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 912.085896][ T5982] usb 7-1: config 1 interface 214 has no altsetting 0 [ 912.106778][ T5982] usb 7-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 912.123923][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.144151][ T5982] usb 7-1: Product: syz [ 912.148401][ T5982] usb 7-1: Manufacturer: syz [ 912.166996][ T5982] usb 7-1: SerialNumber: syz [ 912.239600][ T5150] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 912.454976][T17959] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2977'. [ 912.877532][ T5976] team0 (unregistering): Port device team_slave_1 removed [ 912.951372][ T5976] team0 (unregistering): Port device team_slave_0 removed [ 913.106755][T17967] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2981'. [ 913.187352][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2981'. [ 913.196978][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2981'. [ 913.206126][T17968] netlink: 'syz.7.2981': attribute type 13 has an invalid length. [ 913.242135][T17968] netlink: 'syz.7.2981': attribute type 14 has an invalid length. [ 913.498029][ T5150] Bluetooth: hci5: command tx timeout [ 913.666954][T17947] bond4: entered promiscuous mode [ 913.706721][T17965] bridge5: entered promiscuous mode [ 913.791410][T17974] fuse: blksize only supported for fuseblk [ 913.835024][T17867] team0: Port device team_slave_0 added [ 913.885847][T17867] team0: Port device team_slave_1 added [ 914.010296][T17867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.034788][T17981] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 914.042904][T17981] IPv6: NLM_F_CREATE should be set when creating new route [ 914.051987][T17867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.149695][T17867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.170993][T17987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.200613][T17867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.218162][T17987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.234691][T17867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.274852][T17867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.380949][ T5976] IPVS: stop unused estimator thread 0... [ 914.423880][T17867] hsr_slave_0: entered promiscuous mode [ 914.440982][T17867] hsr_slave_1: entered promiscuous mode [ 914.457916][T17867] debugfs: 'hsr0' already exists in 'hsr' [ 914.474920][T17867] Cannot create hsr debugfs directory [ 914.615895][ T5982] ums-alauda 7-1:1.214: USB Mass Storage device detected [ 914.740324][ T5982] usb 7-1: USB disconnect, device number 124 [ 914.940272][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2986'. [ 914.960760][T18010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.019972][T18010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.050692][T18005] block device autoloading is deprecated and will be removed. [ 915.088718][T18010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.115372][T18010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.973692][T18032] netlink: 164976 bytes leftover after parsing attributes in process `syz.5.2992'. [ 916.124190][T17867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 916.160112][T17867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 916.195944][T17867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 916.336731][T17867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 916.630405][T17867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.690399][T17867] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.730336][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.737612][ T5976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.828677][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.835924][ T5976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.201501][T17867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.311283][T18056] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2996'. [ 917.363894][T18056] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2996'. [ 917.417077][T17867] veth0_vlan: entered promiscuous mode [ 917.450465][T17867] veth1_vlan: entered promiscuous mode [ 917.466140][T18067] fuse: Unknown parameter 'rootmode' [ 917.515120][T18068] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2997'. [ 917.568587][T17867] veth0_macvtap: entered promiscuous mode [ 917.595890][T17867] veth1_macvtap: entered promiscuous mode [ 917.612806][ T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 917.652259][T17867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.708873][T17867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.819634][ T9] usb 3-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 917.831581][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.840558][ T9] usb 3-1: Product: syz [ 917.845270][ T9] usb 3-1: Manufacturer: syz [ 917.858676][T18076] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2999'. [ 917.859638][ T9] usb 3-1: SerialNumber: syz [ 917.943830][ T9] usb 3-1: config 0 descriptor?? [ 917.965393][ T9] rndis_host 3-1:0.0: More than one union descriptor, skipping ... [ 917.983775][ T9] usb 3-1: bad CDC descriptors [ 918.003566][ T9] cdc_acm 3-1:0.0: More than one union descriptor, skipping ... [ 918.045237][T13167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.070969][T13167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.115015][T13167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.135417][T13167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.221410][ T9] usb 3-1: USB disconnect, device number 100 [ 918.669680][T18084] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3000'. [ 919.554449][T18084] team0 (unregistering): Port device team_slave_0 removed [ 919.599605][T18084] team0 (unregistering): Port device team_slave_1 removed [ 919.643961][T18100] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3003'. [ 919.914090][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.936983][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.164334][ T5945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.196592][ T5945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.589106][T18128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 921.819122][T17865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 921.830691][T17865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 921.845461][T17865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 921.858611][T17865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 921.870560][T17865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 921.892407][T18081] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 922.041712][T18081] usb 4-1: Using ep0 maxpacket: 8 [ 922.057194][T18081] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 922.101762][T18081] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 922.149125][T18081] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 922.189703][T18081] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 922.213828][T18147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.237676][T18081] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 922.253325][T18081] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 922.262525][T18081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.265611][T18147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.656166][T18142] chnl_net:caif_netlink_parms(): no params data found [ 923.060710][T18174] usbtmc 4-1:16.0: simple usb_control_msg failed -32 [ 923.187575][T18142] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.218243][T18142] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.243142][T18142] bridge_slave_0: entered allmulticast mode [ 923.353305][T18142] bridge_slave_0: entered promiscuous mode [ 923.498130][T18142] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.525801][T18142] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.553713][T18142] bridge_slave_1: entered allmulticast mode [ 923.583042][T18142] bridge_slave_1: entered promiscuous mode [ 923.826635][T18142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.885833][T18142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.903742][ T5150] Bluetooth: hci0: command tx timeout [ 924.003680][ T3739] dummy0: left allmulticast mode [ 924.009585][ T3739] bridge0: port 1(dummy0) entered disabled state [ 924.034436][ T3739] bridge_slave_1: left allmulticast mode [ 924.040188][ T3739] bridge_slave_1: left promiscuous mode [ 924.071897][ T3739] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.365618][ T3739] bond0 (unregistering): (slave ip6gretap2): Releasing active interface [ 924.394423][ T935] usb 4-1: USB disconnect, device number 113 [ 924.685624][ T3739] bond1 (unregistering): (slave gretap2): Releasing backup interface [ 924.784155][ T3739] dvmrp6 (unregistering): left allmulticast mode [ 925.052891][T18204] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 925.524610][ T3739] bond0 (unregistering): Released all slaves [ 925.874558][ T3739] bond1 (unregistering): (slave bond2): Releasing backup interface [ 925.893301][ T3739] bond1 (unregistering): Released all slaves [ 925.971889][ T5150] Bluetooth: hci0: command tx timeout [ 926.230532][ T3739] bond2 (unregistering): Released all slaves [ 926.263088][ T3739] bond3 (unregistering): Released all slaves [ 926.288525][ T3739] bond4 (unregistering): Released all slaves [ 926.627747][ T3739] bond5 (unregistering): Released all slaves [ 926.663988][T18142] team0: Port device team_slave_0 added [ 926.669883][T18200] tipc: Enabling of bearer rejected, already enabled [ 926.713923][T18142] team0: Port device team_slave_1 added [ 926.788375][ T3739] tipc: Left network mode [ 926.938214][T18142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.956528][T18142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.018776][T18142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.071576][T18142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.110488][T18142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.182350][ T935] usb 7-1: new low-speed USB device number 125 using dummy_hcd [ 927.210719][T18220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.214514][T18142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.229824][T18220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.346871][ T935] usb 7-1: device descriptor read/64, error -71 [ 927.398377][T18142] hsr_slave_0: entered promiscuous mode [ 927.406013][T18142] hsr_slave_1: entered promiscuous mode [ 927.413336][T18142] debugfs: 'hsr0' already exists in 'hsr' [ 927.419555][T18142] Cannot create hsr debugfs directory [ 927.621757][ T935] usb 7-1: new low-speed USB device number 126 using dummy_hcd [ 927.685988][ T3739] hsr_slave_0: left promiscuous mode [ 927.702815][ T3739] hsr_slave_1: left promiscuous mode [ 927.709757][ T3739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.738715][ T3739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.781830][ T935] usb 7-1: device descriptor read/64, error -71 [ 927.908068][ T935] usb usb7-port1: attempt power cycle [ 927.981160][ T3739] team0 (unregistering): Port device batadv2 removed [ 928.051821][ T5150] Bluetooth: hci0: command tx timeout [ 928.118208][ T3739] team0 (unregistering): Port device batadv1 removed [ 928.272347][ T935] usb 7-1: new low-speed USB device number 127 using dummy_hcd [ 928.302884][ T935] usb 7-1: device descriptor read/8, error -71 [ 928.512876][T18081] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 928.542041][ T935] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 928.580106][ T935] usb 7-1: device descriptor read/8, error -71 [ 928.709137][ T935] usb usb7-port1: unable to enumerate USB device [ 928.722635][T18081] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 928.734289][T18081] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 928.746318][T18081] usb 4-1: config 0 interface 0 has no altsetting 0 [ 928.758421][T18081] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 928.777721][T18081] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 928.799955][T18081] usb 4-1: Product: syz [ 928.805198][T18081] usb 4-1: Manufacturer: syz [ 928.810645][T18081] usb 4-1: SerialNumber: syz [ 928.828183][T18081] usb 4-1: config 0 descriptor?? [ 928.843692][T18081] usb 4-1: selecting invalid altsetting 0 [ 928.970995][ T3739] team0 (unregistering): Port device team_slave_1 removed [ 929.027916][ T3739] team0 (unregistering): Port device team_slave_0 removed [ 929.643023][ T3739] lo (unregistering): left allmulticast mode [ 929.831131][T18249] loop2: detected capacity change from 0 to 7 [ 929.867430][ T8766] loop2: [ 929.882485][ T8766] loop2: partition table partially beyond EOD, truncated [ 929.938041][T18249] loop2: [ 929.956597][T18249] loop2: partition table partially beyond EOD, truncated [ 930.132948][ T5150] Bluetooth: hci0: command tx timeout [ 930.740528][T18259] netlink: 'syz.7.3033': attribute type 1 has an invalid length. [ 930.881164][T18261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.890641][T18261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.009932][T18259] 8021q: adding VLAN 0 to HW filter on device bond3 [ 931.198993][T18263] bond3: (slave geneve2): making interface the new active one [ 931.216458][T18263] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 931.716832][ T3739] IPVS: stop unused estimator thread 0... [ 931.842978][T18081] usb 4-1: USB disconnect, device number 114 [ 932.097671][T18281] snd_dummy snd_dummy.0: control 0:0:128:syz0:0 is already present [ 932.456295][T18142] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 932.537590][T18142] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 932.566185][T18142] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 932.612208][T18142] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 933.032178][T18142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.073999][T18142] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.129959][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.137215][ T5966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.220341][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.227613][ T5966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.409909][T18142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.552688][T18081] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 933.575298][T18142] veth0_vlan: entered promiscuous mode [ 933.611227][T18310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.630435][T18142] veth1_vlan: entered promiscuous mode [ 933.652493][T18310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.690139][T18310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.701725][T18081] usb 4-1: device descriptor read/64, error -71 [ 933.740671][T18310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.772833][T18142] veth0_macvtap: entered promiscuous mode [ 933.824276][T18142] veth1_macvtap: entered promiscuous mode [ 933.869318][ T30] audit: type=1326 audit(1768892072.998:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.6.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa01ed865e7 code=0x7ffc0000 [ 933.932466][ T30] audit: type=1326 audit(1768892072.998:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.6.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa01ed2b829 code=0x7ffc0000 [ 933.991753][T18081] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 934.007212][ T30] audit: type=1326 audit(1768892072.998:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.6.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa01ed865e7 code=0x7ffc0000 [ 934.030388][ T30] audit: type=1326 audit(1768892072.998:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.6.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa01ed2b829 code=0x7ffc0000 [ 934.057411][T18142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.099781][ T30] audit: type=1326 audit(1768892072.998:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.6.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa01ed865e7 code=0x7ffc0000 [ 934.122096][T18142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.131326][ T30] audit: type=1326 audit(1768892072.998:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.6.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa01ed2b829 code=0x7ffc0000 [ 934.162651][T18081] usb 4-1: device descriptor read/64, error -71 [ 934.269879][ T30] audit: type=1326 audit(1768892073.068:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.6.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa01ed865e7 code=0x7ffc0000 [ 934.297862][ T30] audit: type=1326 audit(1768892073.088:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.6.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa01ed2b829 code=0x7ffc0000 [ 934.321243][T18081] usb usb4-port1: attempt power cycle [ 934.340201][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.360824][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.380618][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.390275][ T30] audit: type=1326 audit(1768892073.088:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.6.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa01ed865e7 code=0x7ffc0000 [ 934.426389][ T30] audit: type=1326 audit(1768892073.088:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.6.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa01ed2b829 code=0x7ffc0000 [ 934.457793][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.623772][T18328] netlink: 'syz.6.3042': attribute type 10 has an invalid length. [ 934.638365][T18328] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 934.648368][T18328] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 934.677976][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.704246][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.721803][T18081] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 934.750098][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.758637][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.763873][T18081] usb 4-1: device descriptor read/8, error -71 [ 934.901838][ T5885] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 935.021707][T18081] usb 4-1: new low-speed USB device number 118 using dummy_hcd [ 935.128501][ T5885] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 935.157854][ T5885] usb 7-1: config 0 has no interface number 0 [ 935.159238][T18081] usb 4-1: device descriptor read/8, error -71 [ 935.186726][ T5885] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 935.216316][ T5885] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 935.226291][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.272138][T18081] usb usb4-port1: unable to enumerate USB device [ 935.280236][ T5885] usb 7-1: config 0 descriptor?? [ 935.294454][ T5885] usb 7-1: selecting invalid altsetting 1 [ 935.313510][ T5893] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 935.335700][ T5885] dvb_ttusb_budget: ttusb_init_controller: error [ 935.350597][ T5885] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 935.514095][ T5893] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 935.571242][ T5893] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 935.596549][ T5893] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 935.611199][ T5885] DVB: Unable to find symbol cx22700_attach() [ 935.619025][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.680630][T18337] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 935.734890][ T5893] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 935.808414][ T5885] DVB: Unable to find symbol tda10046_attach() [ 935.839931][ T5885] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 935.928996][T18337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.961184][T18337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.022563][ T5885] usb 7-1: USB disconnect, device number 3 [ 936.952534][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.959020][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.062273][ T5885] usb 3-1: USB disconnect, device number 101 [ 938.181719][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 938.256350][T18371] QAT: failed to copy from user cfg_data. [ 938.332334][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 938.476093][ T9] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 938.506688][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.541729][ T9] usb 7-1: Product: syz [ 938.554325][ T9] usb 7-1: Manufacturer: syz [ 938.559261][ T9] usb 7-1: SerialNumber: syz [ 938.598247][ T9] usb 7-1: config 0 descriptor?? [ 938.652992][ T9] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 939.212795][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 939.212817][ T30] audit: type=1326 audit(1768892078.318:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abdf8f749 code=0x7ffc0000 [ 939.326647][ T30] audit: type=1326 audit(1768892078.328:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abdf8f749 code=0x7ffc0000 [ 939.468605][ T30] audit: type=1326 audit(1768892078.328:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f0abdf8f749 code=0x7ffc0000 [ 939.772170][ T9] ssu100 7-1:0.0: probe with driver ssu100 failed with error -110 [ 939.962125][ T30] audit: type=1326 audit(1768892078.328:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abdf8f749 code=0x7ffc0000 [ 940.189523][ T30] audit: type=1326 audit(1768892078.328:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abdf8f749 code=0x7ffc0000 [ 940.218883][ T30] audit: type=1326 audit(1768892078.408:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f0abdf8f749 code=0x7ffc0000 [ 940.261813][ T30] audit: type=1326 audit(1768892078.408:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abdf8f749 code=0x7ffc0000 [ 940.510439][ T30] audit: type=1326 audit(1768892078.408:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abdf8f749 code=0x7ffc0000 [ 940.631867][ T30] audit: type=1326 audit(1768892078.408:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f0abdf8f749 code=0x7ffc0000 [ 940.702381][ T30] audit: type=1326 audit(1768892078.408:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18379 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0abdf8f749 code=0x7ffc0000 [ 940.725319][ T5893] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 940.903665][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 940.910970][ T5893] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 940.927760][ T5893] usb 4-1: config 0 has no interface number 0 [ 940.950176][ T5893] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 940.981179][ T5893] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 941.034024][ T5893] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 941.062399][ T5893] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 941.112686][ T5893] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 941.141039][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.167018][ T5893] usb 4-1: Product: syz [ 941.181544][ T5893] usb 4-1: Manufacturer: syz [ 941.203813][ T5893] usb 4-1: SerialNumber: syz [ 941.248161][ T5893] usb 4-1: config 0 descriptor?? [ 941.478981][ T5893] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 941.510765][ T5982] usb 7-1: USB disconnect, device number 4 [ 941.589744][T18396] netlink: 196 bytes leftover after parsing attributes in process `syz.7.3053'. [ 941.681403][T18393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.703273][T18393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.786318][ T5893] usb 4-1: USB disconnect, device number 119 [ 941.851734][ T5982] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 942.021699][ T5982] usb 3-1: Using ep0 maxpacket: 32 [ 942.098758][ T5982] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 942.107245][ T5982] usb 3-1: config 0 has no interface number 0 [ 942.116669][ T5982] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 942.126066][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.139818][ T5982] usb 3-1: Product: syz [ 942.144085][ T5982] usb 3-1: Manufacturer: syz [ 942.148745][ T5982] usb 3-1: SerialNumber: syz [ 942.156307][ T5982] usb 3-1: config 0 descriptor?? [ 942.166184][ T5982] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 942.265467][T18417] tipc: Started in network mode [ 942.347180][T18417] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 942.475766][T18417] tipc: Enabled bearer , priority 15 [ 942.506159][ T5982] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 942.604534][ T5982] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 943.022773][T18429] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 943.035138][T18425] netlink: 'syz.5.3058': attribute type 27 has an invalid length. [ 943.060108][T18430] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3059'. [ 943.150208][T18436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.181237][T18436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.211433][T18425] batadv0: left promiscuous mode [ 943.217664][T18425] batadv0: left allmulticast mode [ 943.359438][T18425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.373306][T18440] SET target dimension over the limit! [ 943.393156][T18425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.603151][T18425] gretap1: left allmulticast mode [ 943.626538][T18425] ip6gretap2: left promiscuous mode [ 943.640492][T18425] veth5: left promiscuous mode [ 943.651267][T18425] erspan0: left promiscuous mode [ 943.669353][T18425] macsec1: left promiscuous mode [ 943.674815][T18425] macsec1: left allmulticast mode [ 943.725485][T18427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.737805][T18427] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.749319][T18427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 943.819294][ T5893] tipc: Node number set to 8432298 [ 943.827402][ T5966] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.838195][ T5966] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.849157][ T5966] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.860669][ T5966] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.158293][T18449] vivid-007: disconnect [ 944.195117][T18449] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3063'. [ 944.415489][T18452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.438092][T18452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.737078][T18457] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 944.745396][T18457] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 944.974375][T18446] vivid-007: reconnect [ 945.013877][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 945.015462][ T1218] usb 3-1: USB disconnect, device number 102 [ 945.392659][ T1218] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 945.427392][ T1218] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 945.466759][ T1218] quatech2 3-1:0.51: device disconnected [ 945.675376][T18460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.720581][T18460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.402229][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 949.402249][ T30] audit: type=1326 audit(1768892088.538:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18508 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421cd8f749 code=0x7ffc0000 [ 949.433219][ T30] audit: type=1326 audit(1768892088.538:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18508 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421cd8f749 code=0x7ffc0000 [ 949.461097][ T30] audit: type=1326 audit(1768892088.538:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18508 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f421cd8f749 code=0x7ffc0000 [ 949.503741][ T30] audit: type=1326 audit(1768892088.538:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18508 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421cd8f749 code=0x7ffc0000 [ 949.557149][ T30] audit: type=1326 audit(1768892088.538:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18508 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f421cd8f749 code=0x7ffc0000 [ 949.636262][ T30] audit: type=1326 audit(1768892088.538:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18508 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421cd8f749 code=0x7ffc0000 [ 949.721714][ T30] audit: type=1326 audit(1768892088.538:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18508 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f421cd8f749 code=0x7ffc0000 [ 949.752316][ T30] audit: type=1326 audit(1768892088.538:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18508 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421cd8f749 code=0x7ffc0000 [ 949.775600][ T30] audit: type=1326 audit(1768892088.568:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18508 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f421cd8f749 code=0x7ffc0000 [ 949.799449][ T30] audit: type=1326 audit(1768892088.668:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18508 comm="syz.2.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421cd8f749 code=0x7ffc0000 [ 949.840911][T18514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3079'. [ 949.888154][T18515] openvswitch: netlink: Tunnel attr 92 out of range max 16 [ 950.190469][T18532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.494321][ T5982] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 950.662063][ T5982] usb 7-1: Using ep0 maxpacket: 16 [ 950.707206][ T5982] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 950.744295][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.762213][ T5982] usb 7-1: Product: syz [ 950.775975][ T5982] usb 7-1: Manufacturer: syz [ 950.783999][ T5982] usb 7-1: SerialNumber: syz [ 950.804003][ T5982] usb 7-1: config 0 descriptor?? [ 951.038913][ T5982] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 951.049651][ T5982] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 951.060054][ T5982] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 951.068250][ T5982] usb 7-1: media controller created [ 951.090560][ T5982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 951.250891][ T5982] zl10353_read_register: readreg error (reg=127, ret==0) [ 951.261846][ T5982] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 951.294346][ T5982] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 951.333082][ T5982] usb 7-1: USB disconnect, device number 5 [ 951.418508][ T5982] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 951.523098][T18554] random: crng reseeded on system resumption [ 952.525250][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3092'. [ 952.550458][T18568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3092'. [ 952.586938][T18568] netlink: 'syz.6.3092': attribute type 7 has an invalid length. [ 952.627472][T18567] program syz.6.3092 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 952.722404][ T1148] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.754260][ T1148] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.802109][ T1148] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.811060][ T1148] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.996306][ T10] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 953.028429][T18578] input: syz1 as /devices/virtual/input/input96 [ 953.161733][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 953.170817][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 953.182002][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 953.209012][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 953.221676][ T1218] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 953.252009][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.260079][ T10] usb 3-1: Product: ᰊ [ 953.278773][ T10] usb 3-1: Manufacturer: 뢬ᣛ䲊㾺㷀⣁䐢㹹靦蕚蝂힢४钆ᥒ㯇滾䃓傍瀾ࢢ찊焠睖싅洽䅇覟啩㓢ᨯ枀뇿捶᪀홢滩婯࿑᠞ﳁ컉䴋된⸛ᢀق谐䅹黎伶랆栟⯰봫돶ᭁꯓ谵ﺥ [ 953.319330][ T10] usb 3-1: SerialNumber: ⛊᯿췻峈ޝ殛扩욏욪뫂쿍⤤祈ヘ櫄恎檃絿쾦굎擧ﲱ䂝皡ᠭﹽ뷀䁕쿮퇛爰玺鄯餼龙騯㥦뀟胔脕戄ꃭ㮧അ듶ɛ草髷勽꟠鱗㢋ร⡾䋠鋇䔈鎚ࢆᗍ堨갋蒧녺˰坽笵￤환㟥㒯๋ᚠ퇙轿稢ග汰㒹⠚켌鈙 [ 953.367522][T18570] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 953.377745][T18570] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 953.457155][ T1218] usb 4-1: device descriptor read/64, error -71 [ 953.809724][ T1218] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 953.919506][T18570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.939243][T18570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.961802][ T1218] usb 4-1: device descriptor read/64, error -71 [ 953.970166][T18570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.050506][T18570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.111022][ T1218] usb usb4-port1: attempt power cycle [ 954.331945][T18570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.361476][T18570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.371188][T18570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.385404][T18570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.423499][ T10] usb 3-1: USB disconnect, device number 103 [ 954.482549][ T1218] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 954.512397][ T1218] usb 4-1: device descriptor read/8, error -71 [ 954.761805][ T1218] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 954.792457][ T1218] usb 4-1: device descriptor read/8, error -71 [ 954.902790][ T1218] usb usb4-port1: unable to enumerate USB device [ 955.003365][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3102'. [ 955.098412][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3104'. [ 955.282321][T18614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3105'. [ 955.673530][T18613] syz.2.3105 (18613): drop_caches: 2 [ 955.683613][T18613] syz.2.3105 (18613): drop_caches: 2 [ 956.067925][ T5893] usb 6-1: USB disconnect, device number 56 [ 956.220146][T18625] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:4 [ 956.354064][T17865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 956.366403][T17865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 956.375964][T17865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 956.384834][T17865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 956.402384][T17865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 956.570007][T18635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.603223][T18635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.681691][ T1218] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 956.779563][T18634] bond0: option all_slaves_active: invalid value (6) [ 956.791734][ T5885] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 956.945377][ T1218] usb 3-1: Using ep0 maxpacket: 8 [ 956.984333][ T5885] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 957.021020][ T5885] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 957.041761][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 957.052807][ T1218] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 957.061626][ T1218] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 957.072805][ T1218] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 957.082691][ T1218] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 957.092677][ T1218] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 957.105896][ T1218] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 957.115325][ T1218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.136859][ T5885] usb 7-1: Product: syz [ 957.166063][ T5885] usb 7-1: Manufacturer: syz [ 957.191857][ T5885] usb 7-1: SerialNumber: syz [ 957.403315][ T1218] usb 3-1: GET_CAPABILITIES returned 0 [ 957.404089][ T5885] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 957.420174][ T1218] usbtmc 3-1:16.0: can't read capabilities [ 957.607840][T18636] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3111'. [ 957.619742][ T5885] usb 7-1: USB disconnect, device number 6 [ 957.645798][ T5885] usblp0: removed [ 957.698601][ T5893] usb 3-1: USB disconnect, device number 104 [ 957.995834][T18631] chnl_net:caif_netlink_parms(): no params data found [ 958.452057][T17865] Bluetooth: hci1: command tx timeout [ 958.477305][T18631] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.515806][T18631] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.542068][T18631] bridge_slave_0: entered allmulticast mode [ 958.560029][T18678] netlink: 'syz.6.3122': attribute type 2 has an invalid length. [ 958.569296][T18631] bridge_slave_0: entered promiscuous mode [ 958.593452][T18631] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.603235][T18631] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.626576][T18631] bridge_slave_1: entered allmulticast mode [ 958.641953][T18631] bridge_slave_1: entered promiscuous mode [ 958.824595][T18631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.010141][T12870] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 959.193634][T18688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.496585][ T5885] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 959.620189][T18688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.833726][ T5885] usb 4-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 959.852531][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 959.865300][ T5885] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 146, using maximum allowed: 30 [ 959.876905][ T5885] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 146 [ 959.918016][ T5885] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 959.929134][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 960.033157][ T5885] usb 4-1: SerialNumber: syz [ 960.105039][T12870] bond5 (unregistering): (slave ip6gretap4): Releasing backup interface [ 960.139546][T12870] bond5 (unregistering): (slave ip6gretap4): the permanent HWaddr of slave - 0e:f2:db:42:d9:71 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 960.292306][ T5885] usb 4-1: 0:2 : does not exist [ 960.376190][ T5885] usb 4-1: USB disconnect, device number 124 [ 960.408015][T18697] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3126'. [ 960.439955][T18693] create_pit_timer: 5 callbacks suppressed [ 960.439972][T18693] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 960.509447][ T8766] udevd[8766]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 960.531726][T17865] Bluetooth: hci1: command tx timeout [ 960.616419][T18702] netlink: 'syz.2.3126': attribute type 4 has an invalid length. [ 961.268837][T12870] bond1 (unregistering): (slave gretap1): Releasing active interface [ 961.458120][T12870] bond9 (unregistering): (slave gretap2): Releasing active interface [ 961.478190][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 961.478204][ T30] audit: type=1326 audit(1768892100.608:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18710 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 961.556842][ T30] audit: type=1326 audit(1768892100.648:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18710 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 961.611474][ T30] audit: type=1326 audit(1768892100.648:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18710 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 961.666276][ T30] audit: type=1326 audit(1768892100.648:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18710 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 961.711503][ T30] audit: type=1326 audit(1768892100.648:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18710 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 961.734927][ T30] audit: type=1326 audit(1768892100.648:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18710 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 961.759321][ T30] audit: type=1326 audit(1768892100.648:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18710 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 961.787356][ T30] audit: type=1326 audit(1768892100.648:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18710 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 961.827093][ T30] audit: type=1326 audit(1768892100.648:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18710 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 961.856026][ T30] audit: type=1326 audit(1768892100.648:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18710 comm="syz.6.3131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa01ed8f749 code=0x7ffc0000 [ 961.980513][T12870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.002639][T12870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.015376][T12870] bond0 (unregistering): Released all slaves [ 962.054993][T12870] bond1 (unregistering): Released all slaves [ 962.332108][T12870] bond2 (unregistering): Released all slaves [ 962.360430][T12870] bond3 (unregistering): Released all slaves [ 962.607942][T12870] bond4 (unregistering): Released all slaves [ 962.612498][T17865] Bluetooth: hci1: command tx timeout [ 962.680437][T12870] bond5 (unregistering): (slave veth5): Releasing backup interface [ 962.691385][T12870] bond5 (unregistering): Released all slaves [ 962.893044][T18081] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 962.912502][T12870] bond6 (unregistering): Released all slaves [ 962.937585][T12870] bond7 (unregistering): Released all slaves [ 962.961161][T12870] bond8 (unregistering): Released all slaves [ 963.070141][T18081] usb 7-1: Using ep0 maxpacket: 32 [ 963.083836][T18081] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 963.093523][T18081] usb 7-1: config 0 has no interface number 0 [ 963.099695][T18081] usb 7-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid maxpacket 30061, setting to 1024 [ 963.131858][T18081] usb 7-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 963.215036][T18081] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 963.225237][T18081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.234303][T18081] usb 7-1: Product: syz [ 963.238694][T18081] usb 7-1: Manufacturer: syz [ 963.243602][T18081] usb 7-1: SerialNumber: syz [ 963.251499][T12870] bond9 (unregistering): Released all slaves [ 963.257663][T18081] usb 7-1: config 0 descriptor?? [ 963.263919][T18723] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 963.282516][T18081] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 963.308538][T18631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.493336][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 963.513483][T18081] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 963.574081][T18081] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 963.595421][T12870] tipc: Disabling bearer [ 963.620339][T12870] tipc: Left network mode [ 963.756584][T18631] team0: Port device team_slave_0 added [ 963.775941][T18631] team0: Port device team_slave_1 added [ 964.010441][T18631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.017732][T18631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.047957][T18631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.095416][T18631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.118603][T18631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.148017][T18631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.658240][T18631] hsr_slave_0: entered promiscuous mode [ 964.691746][T17865] Bluetooth: hci1: command tx timeout [ 964.710471][T18631] hsr_slave_1: entered promiscuous mode [ 964.764824][T18631] debugfs: 'hsr0' already exists in 'hsr' [ 964.770823][T18631] Cannot create hsr debugfs directory [ 965.243577][ T935] usb 7-1: USB disconnect, device number 7 [ 965.268370][ T935] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 965.376864][ T935] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 965.427123][ T935] quatech2 7-1:0.51: device disconnected [ 966.075694][T18778] netlink: 'syz.6.3144': attribute type 10 has an invalid length. [ 966.085700][T12870] hsr_slave_0: left promiscuous mode [ 966.112540][T12870] hsr_slave_1: left promiscuous mode [ 966.118956][T12870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.158382][T12870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.183305][T18784] loop2: detected capacity change from 0 to 7 [ 966.195578][T18784] Dev loop2: unable to read RDB block 7 [ 966.235990][T18784] loop2: unable to read partition table [ 966.267295][T18784] loop2: partition table beyond EOD, truncated [ 966.298802][T18784] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 966.345152][T18789] loop7: detected capacity change from 0 to 7 [ 966.358637][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 966.368335][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 966.400931][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 966.410623][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 966.424979][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 966.434646][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 966.452184][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 966.461892][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 966.471460][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 966.481180][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 966.499354][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 966.509113][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 966.547777][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 966.557418][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 966.566401][T18789] ldm_validate_partition_table(): Disk read failed. [ 966.597833][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 966.607537][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 966.616283][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 966.625969][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 966.637254][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 966.647330][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 966.660440][T18789] Dev loop7: unable to read RDB block 0 [ 966.676172][T18789] loop7: unable to read partition table [ 966.693434][T18789] loop7: partition table beyond EOD, truncated [ 966.700277][T18789] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 966.848581][ T5200] ldm_validate_partition_table(): Disk read failed. [ 966.857215][ T5200] Dev loop7: unable to read RDB block 0 [ 966.866286][ T5200] loop7: unable to read partition table [ 966.873366][ T5200] loop7: partition table beyond EOD, truncated [ 967.078734][T18798] netlink: 'syz.7.3147': attribute type 2 has an invalid length. [ 967.498788][T12870] team0 (unregistering): Port device team_slave_1 removed [ 968.088167][T18778] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 968.104450][T18778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.114858][T18778] batadv0: entered promiscuous mode [ 968.121552][T18778] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 968.137647][T18783] netlink: 774 bytes leftover after parsing attributes in process `syz.6.3144'. [ 968.161972][T18785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.169427][T18785] batadv0: mtu less than device minimum [ 968.187049][T18785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 968.199139][T18785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 968.210652][T18785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 968.222311][T18785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 968.233873][T18785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 968.245440][T18785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 968.256974][T18785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 968.268373][T18785] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 968.303688][T18785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.312211][T18785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.348279][T18785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.375406][T18785] batman_adv: batadv0: Interface deactivated: dummy0 [ 968.382529][T18785] batman_adv: batadv0: Removing interface: dummy0 [ 968.469452][T18785] bond0: (slave batadv0): Releasing backup interface [ 968.486908][T18785] batadv0 (unregistering): left promiscuous mode [ 968.508642][T18792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3145'. [ 968.530736][T18798] : entered promiscuous mode [ 969.120737][T18810] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 969.711777][ T935] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 969.875039][ T935] usb 3-1: Using ep0 maxpacket: 8 [ 969.884968][ T935] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 969.900934][ T935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.952332][T12870] IPVS: stop unused estimator thread 0... [ 969.984009][ T935] usb 3-1: Product: syz [ 969.988434][ T935] usb 3-1: Manufacturer: syz [ 970.013212][ T935] usb 3-1: SerialNumber: syz [ 970.044870][ T5982] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 970.075136][ T935] usb 3-1: config 0 descriptor?? [ 970.303417][ T935] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 970.312280][ T5982] usb 4-1: Using ep0 maxpacket: 16 [ 970.355239][ T5982] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.439061][ T5982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 970.454941][ T5982] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 970.469947][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.478852][ T5982] usb 4-1: Product: syz [ 970.497342][ T5982] usb 4-1: Manufacturer: syz [ 970.512276][ T5982] usb 4-1: SerialNumber: syz [ 970.552118][T18834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.596548][T18834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.762686][ T5885] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 970.911707][ T5885] usb 7-1: device descriptor read/64, error -71 [ 970.995761][ T5982] usb 4-1: 0:2 : does not exist [ 971.118682][T18631] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 971.152880][T18631] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 971.180327][T18631] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 971.182962][ T5885] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 971.279098][T18631] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 971.371869][ T5885] usb 7-1: device descriptor read/64, error -71 [ 971.466196][ T5982] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 971.492365][ T935] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 971.542263][ T5885] usb usb7-port1: attempt power cycle [ 971.557616][ T935] usb 3-1: USB disconnect, device number 105 [ 971.619544][ T5982] usb 4-1: USB disconnect, device number 125 [ 971.779286][T18631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.871354][T18631] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.891693][ T5885] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 971.966681][ T8766] udevd[8766]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 972.034331][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.041636][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.076404][ T5885] usb 7-1: device descriptor read/8, error -71 [ 972.115485][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.123044][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.201665][ T43] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 972.322091][ T5885] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 972.354867][T18631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.372255][ T5885] usb 7-1: device descriptor read/8, error -71 [ 972.391499][ T43] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 972.432105][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.446992][ T43] usb 3-1: Product: syz [ 972.456875][ T43] usb 3-1: Manufacturer: syz [ 972.467444][ T43] usb 3-1: SerialNumber: syz [ 972.492610][ T5885] usb usb7-port1: unable to enumerate USB device [ 972.506412][ T43] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 972.564237][ T935] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 972.617714][T18631] veth0_vlan: entered promiscuous mode [ 972.700006][T18631] veth1_vlan: entered promiscuous mode [ 972.786557][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 972.786633][ T30] audit: type=1326 audit(1768892111.908:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.2.3157" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f421cd8f749 code=0x0 [ 972.885365][T18631] veth0_macvtap: entered promiscuous mode [ 972.926973][T18631] veth1_macvtap: entered promiscuous mode [ 973.037639][T18631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.073460][T18631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.124033][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.146851][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.160852][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.209711][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.417501][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.433568][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.543466][ T5976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.573781][ T5976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.667399][ T935] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 973.696616][ T935] ath9k_htc: Failed to initialize the device [ 973.772180][ T935] usb 3-1: ath9k_htc: USB layer deinitialized [ 974.453997][T14572] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 974.624392][T14572] usb 6-1: Using ep0 maxpacket: 16 [ 974.667544][T14572] usb 6-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 974.694905][T14572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.729951][T14572] usb 6-1: Product: syz [ 974.749362][T14572] usb 6-1: Manufacturer: syz [ 974.772191][T14572] usb 6-1: SerialNumber: syz [ 974.817321][T14572] usb 6-1: config 0 descriptor?? [ 974.852483][T14572] safe_serial 6-1:0.0: safe_serial converter detected [ 974.900373][T14572] usb 6-1: safe_serial converter now attached to ttyUSB0 [ 974.921474][ T43] usb 3-1: USB disconnect, device number 106 [ 975.113254][ T1218] usb 6-1: USB disconnect, device number 57 [ 975.137794][ T1218] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 975.181221][ T1218] safe_serial 6-1:0.0: device disconnected [ 975.350710][T18914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3164'. [ 975.363126][T18914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3164'. [ 975.802200][T18927] netlink: 'syz.5.3167': attribute type 5 has an invalid length. [ 975.935296][T18927] kAFS: unable to lookup cell '(,cL' [ 976.122011][T18930] trusted_key: encrypted_key: insufficient parameters specified [ 976.372383][T14572] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 976.571991][T14572] usb 6-1: Using ep0 maxpacket: 8 [ 976.642241][T14572] usb 6-1: unable to get BOS descriptor or descriptor too short [ 976.651834][T14572] usb 6-1: config 9 has an invalid interface number: 5 but max is 0 [ 976.660095][T14572] usb 6-1: config 9 has no interface number 0 [ 976.667109][T14572] usb 6-1: config 9 interface 5 altsetting 9 endpoint 0x9 has an invalid bInterval 181, changing to 7 [ 976.678604][T14572] usb 6-1: config 9 interface 5 has no altsetting 0 [ 976.722629][T14572] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 976.732226][T14572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.750465][T14572] usb 6-1: Product: syz [ 976.754995][T14572] usb 6-1: Manufacturer: syz [ 976.759602][T14572] usb 6-1: SerialNumber: syz [ 977.040435][T18932] kAFS: unable to lookup cell '.,' [ 977.307940][T18960] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3171'. [ 977.401461][T18965] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3171'. [ 977.562595][T18969] netlink: 'syz.6.3173': attribute type 27 has an invalid length. [ 978.761868][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 978.931759][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 978.992246][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 979.000368][ T10] usb 7-1: config 0 has no interface number 0 [ 979.059505][ T10] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 979.144590][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.177068][ T10] usb 7-1: Product: syz [ 979.189641][ T10] usb 7-1: Manufacturer: syz [ 979.201842][ T10] usb 7-1: SerialNumber: syz [ 979.219669][ T10] usb 7-1: config 0 descriptor?? [ 979.295100][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 979.354438][T14572] usb 6-1: USB disconnect, device number 58 [ 979.630036][T18994] binder: 18989:18994 ioctl c0045006 0 returned -22 [ 979.841895][ T10] gspca_spca1528: reg_w err -110 [ 979.861809][ T10] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 979.878887][T18969] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 979.973669][T19001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3178'. [ 980.131230][T19001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3178'. [ 980.222966][T18969] tipc: Resetting bearer [ 980.232724][T18969] bond2: left promiscuous mode [ 980.237760][T18969] ip6gre2: left promiscuous mode [ 980.253309][T18969] veth2: left allmulticast mode [ 980.259218][T18969] veth3: left promiscuous mode [ 980.265152][T18969] hsr1: left promiscuous mode [ 980.279053][T18969] geneve2: left promiscuous mode [ 980.285900][T18969] geneve2: left allmulticast mode [ 980.307170][T18969] bond4: left promiscuous mode [ 980.396753][ T8218] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.418079][ T8218] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.427441][ T8218] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 980.513293][ T8218] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.561939][ T8218] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.576189][ T8218] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 980.711333][ T8218] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.752568][ T8218] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.771181][ T8218] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 980.786742][ T8218] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.798292][ T8218] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.810605][ T8218] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 981.141813][T18995] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 981.582928][T19021] sctp: [Deprecated]: syz.2.3181 (pid 19021) Use of int in maxseg socket option. [ 981.582928][T19021] Use struct sctp_assoc_value instead [ 981.942556][ T5982] usb 7-1: USB disconnect, device number 12 [ 983.042997][ T58] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 983.222008][T19042] libceph: resolve '4.' (ret=-3): failed [ 983.242389][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.261822][ T58] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 983.270976][ T58] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 983.312818][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.344358][ T58] usb 4-1: config 0 descriptor?? [ 983.425390][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 983.596755][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 983.622251][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.641858][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 983.682182][ T9] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 983.703573][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.756704][ T9] usb 7-1: config 0 descriptor?? [ 983.772387][ T58] Bluetooth: Can't get version to change to load ram patch err [ 983.791673][ T10] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 983.818380][ T9] pxrc 7-1:0.0: Could not find endpoint [ 983.824914][ T58] Bluetooth: Loading patch file failed [ 983.830453][ T58] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 983.849387][ T9] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 983.869155][ T58] usb 4-1: USB disconnect, device number 126 [ 983.919632][T19050] sctp: [Deprecated]: syz.7.3194 (pid 19050) Use of int in max_burst socket option. [ 983.919632][T19050] Use struct sctp_assoc_value instead [ 983.993935][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 984.006325][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.032825][ T1218] usb 7-1: USB disconnect, device number 13 [ 984.048911][ T10] usb 3-1: config 0 descriptor?? [ 984.105011][ T10] cp210x 3-1:0.0: cp210x converter detected [ 984.280369][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3195'. [ 984.524076][ T10] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 984.753637][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 984.972719][T19046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.982061][T19046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.992176][ T1218] usb 3-1: USB disconnect, device number 107 [ 985.004916][ T1218] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 985.017656][ T1218] cp210x 3-1:0.0: device disconnected [ 985.051720][ T10] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 985.218576][ T10] usb 7-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 985.229524][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.272492][ T10] usb 7-1: Product: syz [ 985.279820][ T10] usb 7-1: Manufacturer: syz [ 985.288019][ T10] usb 7-1: SerialNumber: syz [ 985.301244][ T10] usb 7-1: config 0 descriptor?? [ 985.336096][ T10] usb 7-1: selecting invalid altsetting 1 [ 985.346759][ T10] technisat-usb2: could not set alternate setting to 0 [ 985.532079][ T10] technisat-usb2: firmware version: 0.0 [ 985.544912][ T10] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 985.562854][ T5982] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 985.733776][ T5982] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 985.750743][ T5982] usb 4-1: config 0 has no interface number 0 [ 985.755881][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 985.770320][ T5982] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 985.786835][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.808127][ T10] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 985.828972][ T5982] usb 4-1: config 0 descriptor?? [ 985.836712][ T10] usb 7-1: USB disconnect, device number 14 [ 985.882468][ T5982] cp210x 4-1:0.1: cp210x converter detected [ 986.131860][ T1218] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 986.260278][T19085] netlink: 'syz.5.3206': attribute type 11 has an invalid length. [ 986.275280][ T5982] cp210x 4-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 986.303258][ T1218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 986.331730][ T1218] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 986.370960][ T1218] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 986.388650][ T1218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.408032][ T1218] usb 3-1: config 0 descriptor?? [ 986.523791][ T5982] usb 4-1: cp210x converter now attached to ttyUSB0 [ 986.697858][ T10] usb 4-1: USB disconnect, device number 127 [ 986.717787][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 986.740539][ T10] cp210x 4-1:0.1: device disconnected [ 986.855026][T19100] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3211'. [ 986.929766][T19103] net_ratelimit: 31 callbacks suppressed [ 986.929789][T19103] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0000 with DS=0x85 [ 987.252850][ T10] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 987.421738][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 987.449527][ T10] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 987.476595][ T10] usb 6-1: config 0 has no interface number 0 [ 987.488310][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 987.532412][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.540650][ T10] usb 6-1: Product: syz [ 987.571705][ T10] usb 6-1: Manufacturer: syz [ 987.576412][ T10] usb 6-1: SerialNumber: syz [ 987.601963][ T5893] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 987.619735][ T10] usb 6-1: config 0 descriptor?? [ 987.774773][ T5893] usb 7-1: config 171 has an invalid interface number: 109 but max is 0 [ 987.821924][ T5893] usb 7-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 987.837755][ T5893] usb 7-1: config 171 has no interface number 0 [ 987.845304][ T5893] usb 7-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 987.861264][ T5893] usb 7-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 987.872011][ T5893] usb 7-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 987.890166][T19105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.902848][T19105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.932505][ T10] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 987.951162][ T10] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 987.968727][ T5893] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 987.979297][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.995194][ T1218] usbhid 3-1:0.0: can't add hid device: -71 [ 988.004515][ T1218] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 988.016561][ T5893] usb 7-1: Product: syz [ 988.029579][ T1218] usb 3-1: USB disconnect, device number 108 [ 988.038684][ T10] usb 6-1: USB disconnect, device number 60 [ 988.047384][ T5893] usb 7-1: Manufacturer: syz [ 988.095456][ T5893] usb 7-1: SerialNumber: syz [ 988.132677][T19111] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 989.113415][T19126] netlink: 'syz.2.3219': attribute type 4 has an invalid length. [ 989.181977][ T5893] ath6kl: Failed to submit usb control message: -110 [ 989.195563][ T5893] ath6kl: unable to send the bmi data to the device: -110 [ 989.208856][ T5893] ath6kl: Unable to send get target info: -110 [ 989.224313][ T5893] ath6kl: Failed to init ath6kl core: -110 [ 989.243041][ T5893] ath6kl_usb 7-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 989.288829][ T10] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 989.472024][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 989.484282][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.510505][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.560024][ T10] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 989.587205][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.620120][ T10] usb 6-1: config 0 descriptor?? [ 990.081670][ T10] zeroplus 0003:0C12:0030.0047: item fetching failed at offset 1/5 [ 990.095144][ T10] zeroplus 0003:0C12:0030.0047: parse failed [ 990.113091][ T10] zeroplus 0003:0C12:0030.0047: probe with driver zeroplus failed with error -22 [ 990.282843][ T10] usb 6-1: USB disconnect, device number 61 [ 990.500696][ T1218] usb 7-1: USB disconnect, device number 15 [ 990.880499][T19152] netlink: 'syz.3.3225': attribute type 10 has an invalid length. [ 990.940078][ T1218] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 991.133401][ T1218] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 991.147424][ T1218] usb 7-1: config 0 has no interface number 0 [ 991.159921][ T1218] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 991.178069][ T1218] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 991.200425][ T1218] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 991.229733][ T1218] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 991.255558][ T1218] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 991.275003][ T1218] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 991.315636][ T1218] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 991.337882][ T1218] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.359112][ T1218] usb 7-1: config 0 descriptor?? [ 991.369730][T19148] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 991.381819][T19148] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 991.430233][ T1218] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 991.485748][T19152] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 991.564287][ T10] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 991.645293][T19148] syzkaller0: entered promiscuous mode [ 991.651040][T19148] syzkaller0: entered allmulticast mode [ 1031.175011][T17865] Bluetooth: hci5: command 0x0406 tx timeout [ 1096.871567][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1096.878331][ C0] rcu: 0-...!: (1 GPs behind) idle=314c/1/0x4000000000000000 softirq=144859/144861 fqs=232 [ 1096.889806][ C0] rcu: (t=10500 jiffies g=145573 q=210 ncpus=2) [ 1096.896225][ C0] rcu: rcu_preempt kthread starved for 10030 jiffies! g145573 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1096.907547][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1096.917548][ C0] rcu: RCU grace-period kthread stack dump: [ 1096.923466][ C0] task:rcu_preempt state:R running task stack:27648 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1096.937201][ C0] Call Trace: [ 1096.940580][ C0] [ 1096.943523][ C0] __schedule+0x149b/0x4fd0 [ 1096.948066][ C0] ? __pfx___schedule+0x10/0x10 [ 1096.952938][ C0] ? schedule+0x91/0x360 [ 1096.957200][ C0] schedule+0x165/0x360 [ 1096.961380][ C0] schedule_timeout+0x12b/0x270 [ 1096.966276][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1096.971689][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1096.977106][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1096.982929][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1096.988500][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1096.993378][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1096.999774][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1097.005274][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1097.010665][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1097.016609][ C0] rcu_gp_kthread+0x99/0x390 [ 1097.021549][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1097.026782][ C0] ? __kthread_parkme+0x7b/0x200 [ 1097.031736][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1097.036779][ C0] kthread+0x711/0x8a0 [ 1097.040867][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1097.046080][ C0] ? __pfx_kthread+0x10/0x10 [ 1097.050688][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1097.055934][ C0] ? __pfx_kthread+0x10/0x10 [ 1097.060575][ C0] ret_from_fork+0x510/0xa50 [ 1097.065180][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1097.070302][ C0] ? __switch_to+0xc9e/0x1480 [ 1097.075006][ C0] ? __pfx_kthread+0x10/0x10 [ 1097.079613][ C0] ret_from_fork_asm+0x1a/0x30 [ 1097.084410][ C0] [ 1097.087440][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1097.093767][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1097.099042][ C1] NMI backtrace for cpu 1 [ 1097.099065][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1097.099101][ C1] Tainted: [L]=SOFTLOCKUP [ 1097.099111][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1097.099128][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1097.099154][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 01 0e 00 f3 0f 1e fa fb f4 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1097.099172][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c6 [ 1097.099190][ C1] RAX: 0000000000e52a11 RBX: ffffffff8197287e RCX: 0000000080000001 [ 1097.099204][ C1] RDX: 0000000000000001 RSI: ffffffff8d79361f RDI: ffffffff8bc084e0 [ 1097.099219][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 1097.099242][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822e70 [ 1097.099257][ C1] R13: 1ffff11003959b70 R14: 0000000000000001 R15: 0000000000000001 [ 1097.099270][ C1] FS: 0000000000000000(0000) GS:ffff888125f1b000(0000) knlGS:0000000000000000 [ 1097.099286][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1097.099300][ C1] CR2: 00007fe71f606c17 CR3: 00000000347bc000 CR4: 00000000003526f0 [ 1097.099318][ C1] Call Trace: [ 1097.099327][ C1] [ 1097.099334][ C1] default_idle+0x13/0x20 [ 1097.099359][ C1] default_idle_call+0x73/0xb0 [ 1097.099384][ C1] do_idle+0x1be/0x4d0 [ 1097.099405][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1097.099429][ C1] ? __pfx_do_idle+0x10/0x10 [ 1097.099455][ C1] cpu_startup_entry+0x44/0x60 [ 1097.099476][ C1] start_secondary+0x101/0x110 [ 1097.099505][ C1] common_startup_64+0x13e/0x147 [ 1097.099539][ C1] [ 1097.271005][ C0] CPU: 0 UID: 0 PID: 17867 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1097.271030][ C0] Tainted: [L]=SOFTLOCKUP [ 1097.271036][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1097.271046][ C0] RIP: 0010:tcf_classify+0x3c/0x1140 [ 1097.271073][ C0] Code: 44 89 44 24 4c 49 89 cc 48 89 d3 48 89 74 24 30 49 89 fd 49 be 00 00 00 00 00 fc ff df e8 bc 47 65 f8 48 85 db 48 89 5c 24 20 <0f> 84 8e 00 00 00 e8 a9 47 65 f8 4c 8d 7b 30 4c 89 f8 48 c1 e8 03 [ 1097.271086][ C0] RSP: 0018:ffffc90000007690 EFLAGS: 00000286 [ 1097.271100][ C0] RAX: ffffffff895bc5c4 RBX: ffff888048ad1100 RCX: ffff8880316f9e80 [ 1097.271112][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff888073a77c80 [ 1097.271123][ C0] RBP: ffffc90000007810 R08: 0000000000000000 R09: 0000000000000004 [ 1097.271133][ C0] R10: 0000000000000008 R11: 0000000000000100 R12: ffffc900000077a0 [ 1097.271143][ C0] R13: ffff888073a77c80 R14: dffffc0000000000 R15: ffff888048ad1100 [ 1097.271155][ C0] FS: 0000555592aca500(0000) GS:ffff888125e1b000(0000) knlGS:0000000000000000 [ 1097.271169][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1097.271179][ C0] CR2: 0000200000001340 CR3: 0000000078dfa000 CR4: 00000000003526f0 [ 1097.271193][ C0] Call Trace: [ 1097.271201][ C0] [ 1097.271218][ C0] hfsc_enqueue+0x323/0xf20 [ 1097.271249][ C0] ? __pfx_hfsc_enqueue+0x10/0x10 [ 1097.271272][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1097.271297][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1097.271317][ C0] ? look_up_lock_class+0x57/0x110 [ 1097.271338][ C0] dev_qdisc_enqueue+0x4e/0x240 [ 1097.271354][ C0] ? __dev_queue_xmit+0x1856/0x3100 [ 1097.271380][ C0] __dev_queue_xmit+0x1873/0x3100 [ 1097.271412][ C0] ? __dev_queue_xmit+0x280/0x3100 [ 1097.271434][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1097.271451][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1097.271472][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1097.271496][ C0] ? neigh_resolve_output+0x438/0x750 [ 1097.271539][ C0] ? eth_header+0x11b/0x200 [ 1097.271570][ C0] ? __asan_memcpy+0x40/0x70 [ 1097.271613][ C0] ip_finish_output2+0xbb6/0x1000 [ 1097.271639][ C0] ? ip_skb_dst_mtu+0x917/0xb70 [ 1097.271670][ C0] ? ip_finish_output2+0x3d0/0x1000 [ 1097.271690][ C0] ? ip_finish_output+0x33a/0x3f0 [ 1097.271710][ C0] ip_output+0x29f/0x450 [ 1097.271728][ C0] ? ip_output+0x5b/0x450 [ 1097.271747][ C0] igmp_ifc_timer_expire+0xbb6/0xde0 [ 1097.271764][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1097.271786][ C0] ? igmp_ifc_timer_expire+0x26/0xde0 [ 1097.271807][ C0] call_timer_fn+0x16e/0x590 [ 1097.271824][ C0] ? __pfx_igmp_ifc_timer_expire+0x10/0x10 [ 1097.271840][ C0] ? call_timer_fn+0xbe/0x590 [ 1097.271857][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1097.271883][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1097.271898][ C0] ? __pfx_igmp_ifc_timer_expire+0x10/0x10 [ 1097.271916][ C0] __run_timer_base+0x61a/0x860 [ 1097.271942][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1097.271956][ C0] ? clockevents_program_event+0x247/0x350 [ 1097.271986][ C0] ? sched_clock_cpu+0x74/0x430 [ 1097.272007][ C0] run_timer_softirq+0xb7/0x180 [ 1097.272024][ C0] handle_softirqs+0x22b/0x7c0 [ 1097.272043][ C0] ? __irq_exit_rcu+0x60/0x150 [ 1097.272064][ C0] __irq_exit_rcu+0x60/0x150 [ 1097.272080][ C0] irq_exit_rcu+0x9/0x30 [ 1097.272094][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1097.272112][ C0] [ 1097.272118][ C0] [ 1097.272124][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1097.272141][ C0] RIP: 0010:finish_task_switch+0x242/0x940 [ 1097.272165][ C0] Code: 0f 84 c2 01 00 00 48 85 db 0f 85 e9 01 00 00 e9 6b 05 00 00 4c 8b 75 d0 4c 89 e7 e8 f8 32 cb 09 e8 33 22 37 00 fb 4c 8b 65 c0 <49> 8d bc 24 48 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1097.272178][ C0] RSP: 0018:ffffc90004427958 EFLAGS: 00000202 [ 1097.272191][ C0] RAX: 0000000000077657 RBX: 0000000000000000 RCX: 0000000080000001 [ 1097.272202][ C0] RDX: 0000000000000000 RSI: ffffffff8d79361f RDI: ffffffff8bc084e0 [ 1097.272214][ C0] RBP: ffffc900044279b0 R08: ffffffff8f822e77 R09: 1ffffffff1f045ce [ 1097.272227][ C0] R10: dffffc0000000000 R11: fffffbfff1f045cf R12: ffff8880316f9e80 [ 1097.272239][ C0] R13: dffffc0000000000 R14: ffff88802e229e80 R15: ffff8880b863b498 [ 1097.272262][ C0] ? finish_task_switch+0x23d/0x940 [ 1097.272291][ C0] __schedule+0x14a3/0x4fd0 [ 1097.272326][ C0] ? __pfx___schedule+0x10/0x10 [ 1097.272349][ C0] ? schedule+0x91/0x360 [ 1097.272367][ C0] schedule+0x165/0x360 [ 1097.272384][ C0] do_nanosleep+0x1c5/0x610 [ 1097.272411][ C0] ? do_nanosleep+0x7f/0x610 [ 1097.272435][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 1097.272461][ C0] ? __hrtimer_setup+0x181/0x200 [ 1097.272479][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1097.272504][ C0] hrtimer_nanosleep+0x169/0x360 [ 1097.272527][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1097.272549][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1097.272572][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 1097.272597][ C0] __se_sys_clock_nanosleep+0x339/0x390 [ 1097.272621][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1097.272650][ C0] do_syscall_64+0xec/0xf80 [ 1097.272668][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.272683][ C0] ? trace_irq_disable+0x37/0x100 [ 1097.272704][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1097.272723][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.272739][ C0] RIP: 0033:0x7fbe4efc2005 [ 1097.272755][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 1097.272769][ C0] RSP: 002b:00007fbe4f30fd40 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1097.272783][ C0] RAX: ffffffffffffffda RBX: 00000000000000b9 RCX: 00007fbe4efc2005 [ 1097.272794][ C0] RDX: 00007fbe4f30fd80 RSI: 0000000000000000 RDI: 0000000000000000 [ 1097.272805][ C0] RBP: 00007fbe4f30fdec R08: 0000000000000000 R09: 0000000000000000 [ 1097.272814][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 1097.272824][ C0] R13: 00000000000927c0 R14: 00000000000f214d R15: 00007fbe4f30fe40 [ 1097.272847][ C0] [ 1097.873046][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1097.879669][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1097.889903][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1098.866248][ C0] sched: DL replenish lagged too much